CVE-2026-68513
- Source
- https://cve.org/CVERecord?id=CVE-2026-68513
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68513.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-68513
- Aliases
-
- GHSA-rw5h-3q4v-c3vc
- Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
MINI (1)
openSUSE (2)
UBUNTU (1)
- Related
- Published
- 2026-08-25T19:06:11Z
- Modified
- 2026-10-28T11:01:26Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H CVSS Calculator
- Summary
- OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision
- Details
-
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 contain a heap buffer overflow in PyOpenEXR triggered by a channel-name key collision between literal and prefixed RGB channels. When separate_channels=false, PyOpenEXR maps each physical channel name through channelNameToRGBA() and coalesces the results into a shared RGB array. A crafted flat scanline EXR that contains both a literal channel such as left and prefixed channels such as left.R, left.G, and left.B causes these names to collide, so the wrapper reuses an undersized two-dimensional NumPy array for the coalesced RGB slices and writes out of bounds when OpenEXR.File(path) decodes the pixels. This issue is fixed in versions 3.3.13 and 3.4.14.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-122", "CWE-787" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68513.json" }- References
-
- https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-rw5h-3q4v-c3vc
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68513.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-68513
- https://github.com/AcademySoftwareFoundation/openexr/commit/c1f3ec0d91cfa5a8035ecd00920835ac76e01640
- https://github.com/AcademySoftwareFoundation/openexr/commit/d134e3cd81a2e343f2919e86bf949f576b1ab16a
Affected packages
Git / github.com/academysoftwarefoundation/openexr
Affected ranges
- Type
- GIT
- Repo
- https://github.com/academysoftwarefoundation/openexr
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "3.3.0" }, { "fixed": "3.3.13" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "introduced": "3.4.0" }, { "fixed": "3.4.14" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "fixed": "c1f3ec0d91cfa5a8035ecd00920835ac76e01640" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "d134e3cd81a2e343f2919e86bf949f576b1ab16a" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
v3.*
v3.3.0
v3.3.0-rc2
v3.3.1
v3.3.1-rc
v3.3.10
v3.3.10-rc
v3.3.10-rc2
v3.3.11
v3.3.11-rc3
v3.3.12
v3.3.12-rc
v3.3.2
v3.3.2-rc
v3.3.2-rc2
v3.3.2-rc3
v3.3.2-rc4
v3.3.3
v3.3.3-rc
v3.3.3-rc1
v3.3.4
v3.3.4-rc
v3.3.5
v3.3.5-rc
v3.3.5-rc3
v3.3.6
v3.3.6-rc
v3.3.6-rc2
v3.3.6-rc3
v3.3.6-rc4
v3.3.7
v3.3.7-rc
v3.3.7-rc2
v3.3.7-rc3
v3.3.7-rc4
v3.3.8
v3.3.8-rc
v3.3.9
v3.3.9-rc
v3.3.9-rc2
v3.4.0
v3.4.1
v3.4.1-rc
v3.4.1-rc2
v3.4.10
v3.4.10-rc
v3.4.11
v3.4.11-rc
v3.4.11-rc2
v3.4.11-rc3
v3.4.12
v3.4.12-rc2
v3.4.13
v3.4.13-rc
v3.4.13-rc2
v3.4.13-rc3
v3.4.2
v3.4.2-rc
v3.4.2-rc2
v3.4.3
v3.4.3-rc
v3.4.3-rc2
v3.4.3-rc3
v3.4.4
v3.4.4-rc
v3.4.4-rc2
v3.4.5
v3.4.5-rc
v3.4.6
v3.4.6-rc
v3.4.7
v3.4.7-rc
v3.4.8
v3.4.8-rc
v3.4.9
v3.4.9-rc
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68513.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"140767667168546255661904386608838595447",
"33340831113937776641742231887613879638",
"264764360874799810125116287415061363635",
"100301261823303114145418184536854274086",
"279931583103760949404410090758208443316",
"191314065025864903589779444201464564822",
"161375572990823941765126462424649359154",
"39428569626428273362906903830340562093",
"279931583103760949404410090758208443316",
"331297580770908162014815656714140831829",
"50445613079713378733585560015692343939",
"335408508447200867404957107267122683845",
"111708766549982062342636204382193101079",
"317559576620954986732189415948737449072",
"334421492893388744722468676703614859220",
"151322602256180884028114340827996447750",
"143812301201753332141072786101640836458",
"298493734634939553704814753883244472827",
"139641472286276683853026952998821254688",
"264404113478189019989650228279274429093",
"169280469435018020494360218837032346382",
"53302194944412887896408734538984023709",
"13254931473633673212974878825202067780",
"156919835298240905462277852241635511863",
"220296150823927026548695764874467563721",
"199452415559168273411905861085569826810",
"113988872953227167942243030915917190850",
"175734061514496841985948627911993384671"
],
"threshold": 0.9
},
"id": "CVE-2026-68513-170a6989",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/academysoftwarefoundation/openexr/commit/c1f3ec0d91cfa5a8035ecd00920835ac76e01640",
"target": {
"file": "src/wrappers/python/PyOpenEXR.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "37756862206777700599352222467844602411",
"length": 1886
},
"id": "CVE-2026-68513-1724f907",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/academysoftwarefoundation/openexr/commit/d134e3cd81a2e343f2919e86bf949f576b1ab16a",
"target": {
"file": "src/wrappers/python/PyOpenEXR.cpp",
"function": "PyFile::PyFile"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "105728351419360398633286616622041858831",
"length": 1870
},
"id": "CVE-2026-68513-17cd5d4d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/academysoftwarefoundation/openexr/commit/c1f3ec0d91cfa5a8035ecd00920835ac76e01640",
"target": {
"file": "src/wrappers/python/PyOpenEXR.cpp",
"function": "PyFile::PyFile"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"140767667168546255661904386608838595447",
"33340831113937776641742231887613879638",
"264764360874799810125116287415061363635",
"100301261823303114145418184536854274086",
"279931583103760949404410090758208443316",
"191314065025864903589779444201464564822",
"161375572990823941765126462424649359154",
"39428569626428273362906903830340562093",
"279931583103760949404410090758208443316",
"331297580770908162014815656714140831829",
"50445613079713378733585560015692343939",
"335408508447200867404957107267122683845",
"111708766549982062342636204382193101079",
"317559576620954986732189415948737449072",
"334421492893388744722468676703614859220",
"151322602256180884028114340827996447750",
"143812301201753332141072786101640836458",
"298493734634939553704814753883244472827",
"139641472286276683853026952998821254688",
"264404113478189019989650228279274429093",
"169280469435018020494360218837032346382",
"53302194944412887896408734538984023709",
"13254931473633673212974878825202067780",
"156919835298240905462277852241635511863",
"220296150823927026548695764874467563721",
"199452415559168273411905861085569826810",
"113988872953227167942243030915917190850",
"175734061514496841985948627911993384671"
],
"threshold": 0.9
},
"id": "CVE-2026-68513-5d41b235",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/academysoftwarefoundation/openexr/commit/d134e3cd81a2e343f2919e86bf949f576b1ab16a",
"target": {
"file": "src/wrappers/python/PyOpenEXR.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"95191758270215505045434856453552827731",
"130844820461291284581077916190467060919",
"72655937622517647220605193809093489478",
"6356653080256367484639662127086805791"
],
"threshold": 0.9
},
"id": "CVE-2026-68513-5da67899",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/academysoftwarefoundation/openexr/commit/d134e3cd81a2e343f2919e86bf949f576b1ab16a",
"target": {
"file": "src/wrappers/python/PyOpenEXR.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"95191758270215505045434856453552827731",
"130844820461291284581077916190467060919",
"72655937622517647220605193809093489478",
"6356653080256367484639662127086805791"
],
"threshold": 0.9
},
"id": "CVE-2026-68513-cd14f853",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/academysoftwarefoundation/openexr/commit/c1f3ec0d91cfa5a8035ecd00920835ac76e01640",
"target": {
"file": "src/wrappers/python/PyOpenEXR.h"
}
}
]
vanir_signatures_modified
"2026-10-28T11:01:26Z"