Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-34588
PUBLISHED
More InfoOfficial Page
Assigner-GitHub_M
Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa
View Known Exploited Vulnerability (KEV) details
Published At-06 Apr, 2026 | 15:31
Updated At-15 Jul, 2026 | 01:04
Rejected At-
â–¼CVE Numbering Authority (CNA)
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path operates in place, so this yields both out-of-bounds reads and out-of-bounds writes. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.

Affected Products
Vendor
AcademySoftwareFoundation
Product
openexr
Versions
Affected
  • >= 3.1.0, <= 3.1.13
  • >= 3.2.0, < 3.2.7
  • >= 3.3.0, < 3.3.9
  • >= 3.4.0, < 3.4.9
Problem Types
TypeCWE IDDescription
CWECWE-125CWE-125: Out-of-bounds Read
CWECWE-190CWE-190: Integer Overflow or Wraparound
CWECWE-787CWE-787: Out-of-bounds Write
Type: CWE
CWE ID: CWE-125
Description: CWE-125: Out-of-bounds Read
Type: CWE
CWE ID: CWE-190
Description: CWE-190: Integer Overflow or Wraparound
Type: CWE
CWE ID: CWE-787
Description: CWE-787: Out-of-bounds Write
Metrics
VersionBase scoreBase severityVector
4.08.6HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Version: 4.0
Base score: 8.6
Base severity: HIGH
Vector:
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf
x_refsource_CONFIRM
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.7
x_refsource_MISC
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.9
x_refsource_MISC
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.9
x_refsource_MISC
Hyperlink: https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf
Resource:
x_refsource_CONFIRM
Hyperlink: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.7
Resource:
x_refsource_MISC
Hyperlink: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.9
Resource:
x_refsource_MISC
Hyperlink: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.9
Resource:
x_refsource_MISC
â–¼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file

A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker could exploit an integer overflow vulnerability in the `internal_exr_undo_piz()` function by providing a specially crafted EXR file. This flaw leads to out-of-bounds reads and writes, which may allow for arbitrary code execution or sensitive information disclosure.

Affected Products
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 10
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/o:redhat:enterprise_linux:10.1
  • cpe:/o:redhat:enterprise_linux:10.2
Default Status
affected
Versions
Unaffected
  • From 0:3.1.10-8.el10_1.2 before * (rpm)
  • From 0:3.1.10-8.el10_2.2 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 10.0 Extended Update Support
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/o:redhat:enterprise_linux_eus:10.0
Default Status
affected
Versions
Unaffected
  • From 0:3.1.10-8.el10_0.2 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/a:redhat:enterprise_linux:9
Default Status
affected
Versions
Unaffected
  • From 0:3.1.1-3.el9_7.2 before * (rpm)
  • From 0:3.1.1-3.el9_8.2 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/a:redhat:rhel_e4s:9.0
Default Status
affected
Versions
Unaffected
  • From 0:3.1.1-2.el9_0.3 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/a:redhat:rhel_e4s:9.2
Default Status
affected
Versions
Unaffected
  • From 0:3.1.1-2.el9_2.3 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9.4 Extended Update Support
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/a:redhat:rhel_eus:9.4
Default Status
affected
Versions
Unaffected
  • From 0:3.1.1-2.el9_4.3 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 9.6 Extended Update Support
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
openexr
CPEs
  • cpe:/a:redhat:rhel_eus:9.6
Default Status
affected
Versions
Unaffected
  • From 0:3.1.1-3.el9_6.2 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.3
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/model-opt-cuda-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.3::el9
Default Status
affected
Versions
Unaffected
  • From 1782352950 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.3
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-spyre-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.3::el9
Default Status
affected
Versions
Unaffected
  • From 1782352919 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.3
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-rocm-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.3::el9
Default Status
affected
Versions
Unaffected
  • From 1782353093 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat AI Inference Server 3.3
Collection URL
https://catalog.redhat.com/software/containers/
Package Name
rhaiis/vllm-cuda-rhel9
CPEs
  • cpe:/a:redhat:ai_inference_server:3.3::el9
Default Status
affected
Versions
Unaffected
  • From 1782352847 before * (rpm)
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 6
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
OpenEXR
CPEs
  • cpe:/o:redhat:enterprise_linux:6
Default Status
unknown
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 7
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
OpenEXR
CPEs
  • cpe:/o:redhat:enterprise_linux:7
Default Status
unknown
Vendor
Red Hat, Inc.Red Hat
Product
Red Hat Enterprise Linux 8
Collection URL
https://access.redhat.com/downloads/content/package-browser/
Package Name
OpenEXR
CPEs
  • cpe:/o:redhat:enterprise_linux:8
Default Status
unaffected
Problem Types
TypeCWE IDDescription
CWECWE-190Integer Overflow or Wraparound
Type: CWE
CWE ID: CWE-190
Description: Integer Overflow or Wraparound
Metrics
VersionBase scoreBase severityVector
3.18.8HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 8.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Metrics Other Info
Red Hat severity rating
value:
Important
namespace:
https://access.redhat.com/security/updates/classification/
Impacts
CAPEC IDDescription
Solutions

RHSA-2026:17656: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)

RHSA-2026:15888: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

RHSA-2026:19146: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

RHSA-2026:19587: Red Hat Enterprise Linux AppStream E4S (v.9.0)

RHSA-2026:17659: Red Hat Enterprise Linux AppStream E4S (v.9.2)

RHSA-2026:17658: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)

RHSA-2026:17660: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)

RHSA-2026:15887: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

RHSA-2026:19359: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)

RHSA-2026:30078: Red Hat AI Inference Server 3.3

RHSA-2026:30089: Red Hat AI Inference Server 3.3

RHSA-2026:30088: Red Hat AI Inference Server 3.3

RHSA-2026:30087: Red Hat AI Inference Server 3.3

Configurations
Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Exploits
Credits
Timeline
EventDate
Reported to Red Hat.2026-04-06 16:02:38
Made public.2026-04-06 15:31:57
Event: Reported to Red Hat.
Date: 2026-04-06 16:02:38
Event: Made public.
Date: 2026-04-06 15:31:57
Replaced By
Rejected Reason
References
HyperlinkResource
https://access.redhat.com/security/cve/CVE-2026-34588
vdb-entry
x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2455408
issue-tracking
x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34588.json
x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:17656
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:15888
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19146
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19587
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17659
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17658
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17660
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:15887
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19359
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30078
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30089
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30088
vendor-advisory
x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30087
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/security/cve/CVE-2026-34588
Resource:
vdb-entry
x_refsource_REDHAT
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=2455408
Resource:
issue-tracking
x_refsource_REDHAT
Hyperlink: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34588.json
Resource:
x_sadp-csaf-vex
Hyperlink: https://access.redhat.com/errata/RHSA-2026:17656
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:15888
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:19146
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:19587
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:17659
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:17658
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:17660
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:15887
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:19359
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:30078
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:30089
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:30088
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://access.redhat.com/errata/RHSA-2026:30087
Resource:
vendor-advisory
x_refsource_REDHAT
Details not found