CVE-2026-59186

A flaw was found in OpenEXR, a widely used image format library. A remote attacker could exploit this by providing a specially crafted tiled EXR file. When processed on a 32-bit system, an integer overflow occurs during buffer size calculation, leading to a heap out-of-bounds write. This could result in a denial of service or potentially lead to other impacts.

Important: OpenEXR is vulnerable to a heap out-of-bounds write when processing specially crafted tiled EXR files on 32-bit/ILP32 builds. This flaw could lead to a denial of service or potentially arbitrary code execution if an attacker provides a malicious EXR file. Red Hat Enterprise Linux 8 (32-bit/ILP32 builds) is affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted or unverified EXR image files with applications linked against OpenEXR, particularly on 32-bit/ILP32 systems. Additionally, consider running applications that process EXR files in a sandboxed environment to limit potential impact from successful exploitation.