CVE-2026-65979

A flaw was found in OpenEXR's HTJ2K decoder. A local user could be tricked into opening a specially crafted EXR image file. When processed, the decoder reads beyond the bounds of an allocated buffer due to an unvalidated header length field. This out-of-bounds read can lead to a denial of service, making the application unavailable.

This Moderate impact flaw in OpenEXR's HTJ2K decoder, which could lead to a denial of service when processing a crafted EXR file, does not affect Red Hat products. Red Hat's versions of OpenEXR do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.