CVE-2026-59985 | AcademySoftwareFoundation OpenEXR up to 3.2.10/3.3.12/3.4.13 OpenEXRCore decoding.c unpack_32bit out-of-bounds

A vulnerability classified as problematic was found in AcademySoftwareFoundation OpenEXR up to 3.2.10/3.3.12/3.4.13. This impacts the function unpack_32bit of the file decoding.c of the component OpenEXRCore. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is handled as CVE-2026-59985. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More