VDB
JLSEC-2026-129
JLSEC-2026-129
PUBLISHED
CVSS 4.300000190734863 MEDIUM
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | OpenEXR_jll | 0 |
| Julia | OpenEXR_jll | 0, 0 |
Timeline
- Apr 17, 2026 CVE Published
- Jul 18, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch