CVE-2026-44663 | AcademySoftwareFoundation OpenEXR up to 3.4.10 EXR Image internal_ht.cpp ht_undo_impl integer overflow (GHSA-777r-f9x8-7r84)

June 19, 2026 Yanac

A vulnerability was found in AcademySoftwareFoundation OpenEXR up to 3.4.10 and classified as problematic. Impacted is the function ht_undo_impl in the library src/lib/OpenEXRCore/internal_ht.cpp of the component EXR Image Handler. Such manipulation leads to integer overflow.

This vulnerability is listed as CVE-2026-44663. The attack must be carried out locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More