CVE-2026-59187

A flaw was found in OpenEXR. The exrmetrics tool is vulnerable to a heap out-of-bounds write when processing a specially crafted deep scanline EXR image. This occurs during pixel conversion operations, where the tool attempts to write floating-point data into buffers allocated for half-float data. A remote attacker could exploit this vulnerability by providing a malicious EXR file, leading to a denial of service.

This Important vulnerability in OpenEXR, a heap out-of-bounds write in exrmetrics, does not affect Red Hat products. The vulnerable code is not present in the versions of OpenEXR shipped with Red Hat Enterprise Linux and other Red Hat offerings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.