VDB
JLSEC-2026-128
JLSEC-2026-128
PUBLISHED
CVSS 2.0999999046325684 LOW
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.
Risk Scores
CVSS 2.0
2.0999999046325684
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | OpenEXR_jll | 0 |
| Julia | OpenEXR_jll | 0, 0 |
Timeline
- Apr 17, 2026 CVE Published
- Jul 18, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch