CVE-2026-59189 | AcademySoftwareFoundation OpenEXR up to 3.3.12/3.4.12 TypedDeepImageChannel row out-of-bounds

August 25, 2026 Yanac

A vulnerability, which was classified as critical, was found in AcademySoftwareFoundation OpenEXR up to 3.3.12/3.4.12. Affected is the function TypedDeepImageChannel::row of the component TypedDeepImageChannel. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is tracked as CVE-2026-59189. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More