OSV-2026-1517

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2026-1517.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1517
Published
2026-11-10T00:02:03Z
Modified
2026-11-10T14:36:41Z
Summary
UNKNOWN READ in ojph::local::param_nlt::~param_nlt
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=583440205

Crash type: UNKNOWN READ
Crash state:
ojph::local::param_nlt::~param_nlt
ojph::local::param_nlt::~param_nlt
ojph::local::codestream::~codestream
References

Affected packages

OSS-Fuzz / openexr

Package

Name
openexr
Purl
pkg:generic/openexr

Affected ranges

Type
GIT
Repo
https://github.com/AcademySoftwareFoundation/openexr
Events
Introduced
d2b07b19423a9c595644956f199f0f4168e8c5cd
Fixed
e9e9fefc429904f412699199a5264bcba1e655ec
Introduced
396c10e13f6c1d37dddde79da307f2715a0d1a4e
Fixed
56eb91e50e5615d5c89483ea9dae4dde5376a53f

Affected versions

v3.*
v3.5.0
v3.5.0-rc2
v3.5.1
v3.5.1-rc
v3.5.2
v3.5.2-rc
v3.5.3
v3.5.3-rc

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"69e83e36d9746b4e7bdca9e4e2277dccacda74cb:e9e9fefc429904f412699199a5264bcba1e655ec"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2026-1517.yaml"