CVE-2026-59184

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-59184
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59184.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-59184
Aliases
  • GHSA-pqp9-558c-453q
Downstream
ALSA (3)
AZL (1)
BELL (1)
CLSA (2)
DEBIAN (1)
ECHO (1)
MINI (1)
openSUSE (3)
RHSA (2)
RLSA (3)
ROOT (3)
SUSE (2)
UBUNTU (1)
Related
ALSA (3)
openSUSE (3)
SUSE (2)
Published
2026-08-25T16:28:47Z
Modified
2026-10-28T11:18:08Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVSS Calculator
Summary
OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write
Details

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-416",
        "CWE-787"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59184.json"
}
References

Affected packages

Git / github.com/academysoftwarefoundation/openexr

Affected ranges

Type
GIT
Repo
https://github.com/academysoftwarefoundation/openexr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ba4b1af3a096e8f69e1836b210976585189a5fca
Introduced
c7d3eac70ccde2c4ed484c6638b83ba872f71464
Fixed
ca50a6bb1f64c4d53362e4b67aec33e67cb7d425
Introduced
20a65852895894434bea88613f6d29ac8e88bd6e
Fixed
777d231a179de1711d2a942810d9559216ab3f4c
Fixed
37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1
Fixed
55b7958ecb5ac32c427ff39c1e063f6f7bbee77c
Fixed
aef02224ba282a802de65d16c49c1cdb82089dec
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "3.2.11"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "introduced":  "3.3.0"
                },
                {
                    "fixed":  "3.3.13"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "introduced":  "3.4.0"
                },
                {
                    "fixed":  "3.4.14"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "fixed":  "37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "55b7958ecb5ac32c427ff39c1e063f6f7bbee77c"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "aef02224ba282a802de65d16c49c1cdb82089dec"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Other
OPENEXR_1_0_4
v1.*
v1.7.1
v2.*
v2.0.0
v2.0.0.GM
v2.0.1
v2.1.0
v2.3.0
v2.4.0
v2.4.0-beta.1
v2.5.0
v3.*
v3.0.0-beta
v3.2.0
v3.2.0-rc
v3.2.0-rc2
v3.2.0-rc3
v3.2.0-rc4
v3.2.1
v3.2.1-rc
v3.2.10
v3.2.10-rc
v3.2.2
v3.2.2-rc
v3.2.2-rc2
v3.2.3
v3.2.3-rc
v3.2.3-rc2
v3.2.4
v3.2.4-rc
v3.2.4-rc2
v3.2.5
v3.2.5-rc
v3.2.6
v3.2.6-rc
v3.2.7
v3.2.7-rc
v3.2.8
v3.2.8-rc
v3.2.9
v3.2.9-rc
v3.3.0
v3.3.0-rc2
v3.3.1
v3.3.1-rc
v3.3.10
v3.3.10-rc
v3.3.10-rc2
v3.3.11
v3.3.11-rc3
v3.3.12
v3.3.12-rc
v3.3.2
v3.3.2-rc
v3.3.2-rc2
v3.3.2-rc3
v3.3.2-rc4
v3.3.3
v3.3.3-rc
v3.3.3-rc1
v3.3.4
v3.3.4-rc
v3.3.5
v3.3.5-rc
v3.3.5-rc3
v3.3.6
v3.3.6-rc
v3.3.6-rc2
v3.3.6-rc3
v3.3.6-rc4
v3.3.7
v3.3.7-rc
v3.3.7-rc2
v3.3.7-rc3
v3.3.7-rc4
v3.3.8
v3.3.8-rc
v3.3.9
v3.3.9-rc
v3.3.9-rc2
v3.4.0
v3.4.1
v3.4.1-rc
v3.4.1-rc2
v3.4.10
v3.4.10-rc
v3.4.11
v3.4.11-rc
v3.4.11-rc2
v3.4.11-rc3
v3.4.12
v3.4.12-rc2
v3.4.13
v3.4.13-rc
v3.4.13-rc2
v3.4.13-rc3
v3.4.2
v3.4.2-rc
v3.4.2-rc2
v3.4.3
v3.4.3-rc
v3.4.3-rc2
v3.4.3-rc3
v3.4.4
v3.4.4-rc
v3.4.4-rc2
v3.4.5
v3.4.5-rc
v3.4.6
v3.4.6-rc
v3.4.7
v3.4.7-rc
v3.4.8
v3.4.8-rc
v3.4.9
v3.4.9-rc

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-59184.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "158796205751142772897768494416029777845",
            "length":  72
        },
        "id":  "CVE-2026-59184-029f7024",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "33088020735471794752811703951061431685",
                "295620870024032927240760181809029871864",
                "18812187228488125594640742038424998789",
                "161132528775893895852039169535639786485",
                "13857654978500129048888096659620392393",
                "120073767694878138826856607156011155405",
                "260664129758642251505016801450453866427",
                "331184302860071834278978743063489719015",
                "285166751721855665171686788274856720506",
                "68168968677568436872626054001993677402"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-1a27d03d",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "39369499439165929212425823308619691159",
                "266760019383743716150584509388851496900",
                "42653368493869997497314442718458143516",
                "103671658102312103092147353335086631542",
                "107073319122823109909174352669628305239",
                "232275175117863456315395640753074673444",
                "240512483478303665726891746749257419994"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-243fa8bb",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/test/OpenEXRUtilTest/testDeepImage.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "110585950910128101596843041345344169165",
            "length":  66
        },
        "id":  "CVE-2026-59184-2948d9bf",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "110585950910128101596843041345344169165",
            "length":  66
        },
        "id":  "CVE-2026-59184-2a79c749",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "33088020735471794752811703951061431685",
                "295620870024032927240760181809029871864",
                "18812187228488125594640742038424998789",
                "161132528775893895852039169535639786485",
                "13857654978500129048888096659620392393",
                "120073767694878138826856607156011155405",
                "260664129758642251505016801450453866427",
                "331184302860071834278978743063489719015",
                "285166751721855665171686788274856720506",
                "68168968677568436872626054001993677402"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-2b130667",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "158796205751142772897768494416029777845",
            "length":  72
        },
        "id":  "CVE-2026-59184-33f1523a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "254502877786632950204708836805398063097",
                "114228806546493661120860686230784564472",
                "226198338003979056262324399968515474804",
                "301136904542702397400972023161823894536"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-358477e2",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfSampleCountChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "158796205751142772897768494416029777845",
            "length":  72
        },
        "id":  "CVE-2026-59184-439b3ef3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "33088020735471794752811703951061431685",
                "295620870024032927240760181809029871864",
                "18812187228488125594640742038424998789",
                "161132528775893895852039169535639786485",
                "13857654978500129048888096659620392393",
                "120073767694878138826856607156011155405",
                "260664129758642251505016801450453866427",
                "331184302860071834278978743063489719015",
                "285166751721855665171686788274856720506",
                "68168968677568436872626054001993677402"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-56d7b9d4",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "254502877786632950204708836805398063097",
                "114228806546493661120860686230784564472",
                "226198338003979056262324399968515474804",
                "301136904542702397400972023161823894536"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-5c388692",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfSampleCountChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "69030260872799709258455909920858315950",
                "79627724265277323862740959468206508283",
                "18812187228488125594640742038424998789",
                "242912398733734525914089318487284155868",
                "176075231185443607266967389174586416626",
                "178298400957258287113074708337116367137",
                "24661120780328304642855224802032703976",
                "277232867296595662039933500404193229201",
                "247908825518859004264210074910806670668",
                "125277615393647158451864593506443900735"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-6040ef06",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "69030260872799709258455909920858315950",
                "79627724265277323862740959468206508283",
                "18812187228488125594640742038424998789",
                "242912398733734525914089318487284155868",
                "176075231185443607266967389174586416626",
                "178298400957258287113074708337116367137",
                "24661120780328304642855224802032703976",
                "277232867296595662039933500404193229201",
                "247908825518859004264210074910806670668",
                "125277615393647158451864593506443900735"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-61895ded",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "314156685687285098169350094337245807471",
            "length":  119
        },
        "id":  "CVE-2026-59184-6b483d18",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfSampleCountChannel.h",
            "function":  "SampleCountChannel::row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "314156685687285098169350094337245807471",
            "length":  119
        },
        "id":  "CVE-2026-59184-6d01d8e3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfSampleCountChannel.h",
            "function":  "SampleCountChannel::row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "69030260872799709258455909920858315950",
                "79627724265277323862740959468206508283",
                "18812187228488125594640742038424998789",
                "242912398733734525914089318487284155868",
                "176075231185443607266967389174586416626",
                "178298400957258287113074708337116367137",
                "24661120780328304642855224802032703976",
                "277232867296595662039933500404193229201",
                "247908825518859004264210074910806670668",
                "125277615393647158451864593506443900735"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-7cf1858a",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "39369499439165929212425823308619691159",
                "266760019383743716150584509388851496900",
                "42653368493869997497314442718458143516",
                "103671658102312103092147353335086631542",
                "107073319122823109909174352669628305239",
                "232275175117863456315395640753074673444",
                "240512483478303665726891746749257419994"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-801b3656",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/test/OpenEXRUtilTest/testDeepImage.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "110585950910128101596843041345344169165",
            "length":  66
        },
        "id":  "CVE-2026-59184-81059b4b",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "158796205751142772897768494416029777845",
            "length":  72
        },
        "id":  "CVE-2026-59184-97e56df8",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "314156685687285098169350094337245807471",
            "length":  119
        },
        "id":  "CVE-2026-59184-a2305b70",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfSampleCountChannel.h",
            "function":  "SampleCountChannel::row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "158796205751142772897768494416029777845",
            "length":  72
        },
        "id":  "CVE-2026-59184-aae2caac",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "110585950910128101596843041345344169165",
            "length":  66
        },
        "id":  "CVE-2026-59184-bbf865bf",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "110585950910128101596843041345344169165",
            "length":  66
        },
        "id":  "CVE-2026-59184-cd43c617",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "161641068831394744715730264042097066174",
            "length":  447
        },
        "id":  "CVE-2026-59184-ce2ca0b7",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/test/OpenEXRUtilTest/testDeepImage.cpp",
            "function":  "testDeepImage"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "161641068831394744715730264042097066174",
            "length":  447
        },
        "id":  "CVE-2026-59184-d1912d1a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/test/OpenEXRUtilTest/testDeepImage.cpp",
            "function":  "testDeepImage"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "161641068831394744715730264042097066174",
            "length":  447
        },
        "id":  "CVE-2026-59184-d3ad8b7e",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/test/OpenEXRUtilTest/testDeepImage.cpp",
            "function":  "testDeepImage"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "110585950910128101596843041345344169165",
            "length":  66
        },
        "id":  "CVE-2026-59184-d513f6a7",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfFlatImageChannel.h",
            "function":  "row"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "39369499439165929212425823308619691159",
                "266760019383743716150584509388851496900",
                "42653368493869997497314442718458143516",
                "103671658102312103092147353335086631542",
                "107073319122823109909174352669628305239",
                "232275175117863456315395640753074673444",
                "240512483478303665726891746749257419994"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-e08c2a28",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/test/OpenEXRUtilTest/testDeepImage.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "254502877786632950204708836805398063097",
                "114228806546493661120860686230784564472",
                "226198338003979056262324399968515474804",
                "301136904542702397400972023161823894536"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59184-ebc09a22",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfSampleCountChannel.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "158796205751142772897768494416029777845",
            "length":  72
        },
        "id":  "CVE-2026-59184-ff962b91",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/academysoftwarefoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77c",
        "target":  {
            "file":  "src/lib/OpenEXRUtil/ImfDeepImageChannel.h",
            "function":  "row"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T11:18:08Z"