CVE-2026-34543

A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted EXR file. This could lead to the disclosure of sensitive information from heap memory through the decoded pixel data, without requiring any user interaction.

Moderate. This information disclosure flaw in OpenEXR allows a remote attacker to leak sensitive heap memory data by tricking a user into opening a specially crafted EXR file. This affects Red Hat Enterprise Linux and Fedora systems that process OpenEXR files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid opening or processing EXR files from untrusted sources. If the OpenEXR library is not essential for system operations, consider removing packages that depend on it to reduce the potential attack surface.