OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 1, 2026 · NIST NVD

   Detected

   OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data (information disclosure). This occurs under default settings; simply reading a malicious EXR file is sufficient to trigger the

2. Jun 17, 2026 · NIST NVD

   Updated

   OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data (information disclosure). This occurs under default settings; simply reading a malicious EXR file is sufficient to trigger the

Affected

• cpe openexr/openexrversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-34543

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-34543

  OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data (inform

  nvd.nist.gov

References

• Patch · github.com
• Product · github.com
• Exploit · github.com