CVE-2026-68515

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could allow an attacker to achieve arbitrary code execution or cause a denial of service (DoS) on the affected system.

This is an Important vulnerability in the OpenEXR exrmultiview utility. Exploitation requires a local attacker to persuade a user to process specially crafted EXR image files. Successful attacks could result in a heap out-of-bounds write, potentially leading to arbitrary code execution or a denial of service on Red Hat systems. The requirement for user interaction and local access limits the overall risk, but the potential for system compromise warrants an Important rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted or unverified EXR image files with the exrmultiview utility. Users should exercise caution when handling EXR files from unknown or suspicious sources. If possible, restrict the execution environment of exrmultiview through sandboxing mechanisms to limit potential impact.