UBUNTU-CVE-2026-34545

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-34545
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-34545.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-34545
Upstream
Published
2026-04-01T21:17:00Z
Modified
2026-10-17T12:58:11Z
Severity
  • 8.4 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.7, an attacker providing a crafted .exr file with HTJ2K compression and a channel width of 32768 can write controlled data beyond the output heap buffer in any application that decodes EXR images. The write primitive is 2 bytes per overflow iteration or 4 bytes (by another path), repeating for each additional pixel past the overflow point. In this context, a heap write overflow can lead to remote code execution on systems. This issue has been patched in version 3.4.7.

References

Affected packages

Ubuntu:26.10 / openexr

Package

Name
openexr
Purl
pkg:deb/ubuntu/openexr?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.1.13-2build1
3.4.6+ds-4ubuntu3

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "libopenexr-3-4-33",
            "binary_version":  "3.4.6+ds-4ubuntu3"
        },
        {
            "binary_name":  "openexr",
            "binary_version":  "3.4.6+ds-4ubuntu3"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-34545.json"