CVE-2026-59184

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row() function to return an invalid memory pointer, leading to out-of-bounds or use-after-free writes when an application processes the image using FlatHalfChannel::row(). This could result in arbitrary code execution or a denial of service (DoS) in affected applications that process untrusted EXR files.

This vulnerability is rated as an Important severity impact for Red Hat Enterprise Linux because an attacker can trigger heap memory corruption and potentially execute arbitrary code, requiring only that an application or user processes an untrusted image. Enterprise environments running automated media pipelines, graphic rendering services, or workstation applications that handle externally supplied EXR assets are primarily exposed. In standard headless server deployments where OpenEXR is present as an unused library dependency, the attack surface remains minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, restrict the processing of EXR files to trusted sources only. Applications that use OpenEXR for writing image rows should avoid handling untrusted EXR files to prevent potential out-of-bounds write or use-after-free issues.