OSV-2026-1355

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2026-1355.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1355
Published
2026-10-03T00:18:48Z
Modified
2026-10-31T12:30:02Z
Summary
UNKNOWN READ in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<Imf_4_0::Name, I
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568469733

Crash type: UNKNOWN READ
Crash state:
std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<Imf_4_0::Name, I
Imf_4_0::Header::insert
Imf_4_0::initialize
References

Affected packages

OSS-Fuzz / openexr

Package

Name
openexr
Purl
pkg:generic/openexr

Affected ranges

Type
GIT
Repo
https://github.com/AcademySoftwareFoundation/openexr
Events
Introduced
d2b07b19423a9c595644956f199f0f4168e8c5cd
Fixed
f1a5974953edf7e42e077c98c5ad8e6b87b3e9e6
Introduced
396c10e13f6c1d37dddde79da307f2715a0d1a4e
Fixed
f9feba88b9c3fdd054178408ab6d025211662513

Affected versions

v3.*
v3.5.0
v3.5.0-rc2
v3.5.1
v3.5.1-rc
v3.5.2
v3.5.2-rc

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"d1d1c91cb8bb3fa2c3dc32ed19d07e56bd971a24:f1a5974953edf7e42e077c98c5ad8e6b87b3e9e6"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2026-1355.yaml"