점검 대응높음KEV 미등록
CVE-2026-45696
AcademySoftwareFoundation openexr, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 취약점
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, the HTJ2K (High-Throughput JPEG 2000) decoder, ht_undo_impl() in OpenEXRCore is vulnerable to a heap-buffer-overflow READ. The ht_undo_imp function copies decoded pixels out of a per-line OpenJPH buffer using the EXR channel's declared width as the iteration count. The codestream embedded in the EXR chunk can declare different (smaller) tile/line dimensions than the EXR header advertises, but ht_undo_impl() does not validate this —...
- 대응 우선순위
- 점검
- CVSS
- 8.3
- EPSS
- 0.29% 백분위 21.5% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.19