OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 1, 2026 · NIST NVD

   Detected

   OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via exr_decoding_run(). Consequences range from immediate crash (most likely) to corruption of adjacent heap all

2. Jun 17, 2026 · NIST NVD

   Updated

   OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via exr_decoding_run(). Consequences range from immediate crash (most likely) to corruption of adjacent heap all

Affected

• cpe openexr/openexrversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-34544

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-34544

  OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that dec

  nvd.nist.gov

References

• Patch · github.com
• Product · github.com
• Exploit · github.com