CVE-2026-59983

A flaw was found in OpenEXR. A remote attacker could exploit an out-of-bounds read vulnerability by providing a specially crafted uncompressed deep-tile EXR image file. This crafted file causes an error in the sample-count table size calculation, leading to a wrap-around before processing the full image dimensions. This can result in a denial of service (DoS), making the application unavailable.

This Moderate impact flaw in OpenEXR affects ILP32 builds, leading to a denial of service when processing a specially crafted deep-tile EXR file. Exploitation requires user interaction to open the malicious file. Red Hat Enterprise Linux 8 is affected, while Red Hat Enterprise Linux 9 and 10 are not vulnerable due to the absence of the affected code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.