CVE-2026-68513

A flaw was found in PyOpenEXR, a component of OpenEXR. A heap buffer overflow can occur when processing a specially crafted EXR image file. This vulnerability is triggered by a channel-name key collision between literal and prefixed RGB channels, causing the software to write data beyond the allocated memory buffer. An attacker could exploit this by tricking a user into opening a malicious EXR file, potentially leading to arbitrary code execution or a denial of service.

Important: This heap buffer overflow in PyOpenEXR could lead to arbitrary code execution when processing a specially crafted EXR file. However, Red Hat products are not affected by this vulnerability as the vulnerable code is not present in the shipped versions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.