CVE-2026-55059 | AcademySoftwareFoundation OpenEXR up to 3.2.9/3.3.11/3.4.12 DeepImage API set newNumSamples out-of-bounds write

August 25, 2026 Yanac

A vulnerability was found in AcademySoftwareFoundation OpenEXR up to 3.2.9/3.3.11/3.4.12 and classified as critical. The impacted element is the function Imf_4_0::SampleCountChannel::set of the component DeepImage API. Such manipulation of the argument newNumSamples leads to out-of-bounds write.

This vulnerability is traded as CVE-2026-55059. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More