CVE-2026-55373 | AcademySoftwareFoundation OpenEXR up to 3.2.9/3.3.11/3.4.12 SampleCountChannel roundListSizeUp infinite loop

August 25, 2026 Yanac

A vulnerability was found in AcademySoftwareFoundation OpenEXR up to 3.2.9/3.3.11/3.4.12. It has been declared as problematic. This impacts the function roundListSizeUp of the component SampleCountChannel. Executing a manipulation can lead to infinite loop.

This vulnerability is handled as CVE-2026-55373. It is possible to launch the attack on the local host. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More