CVE-2026-44663

A security flaw has been identified in OpenEXR, a widely used image format library, which may impact applications processing certain high-resolution image files.

This Moderate impact flaw in OpenEXR, present in Red Hat products, arises from an integer overflow when decoding maliciously crafted HTJ2K-compressed EXR files. Successful exploitation requires user interaction to open a specially crafted file, leading to a heap-buffer overflow that can result in denial of service and potential data integrity corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted HTJ2K-compressed EXR files. Restricting the handling of such files to trusted sources can prevent exploitation of this vulnerability in applications that utilize the OpenEXR library.