CVE-2026-55371: AcademySoftwareFoundation openexr, грешка в паметта

Описание

Оригинално описание

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exr_attr_set_bytes(). The public setter validates the top-level exr_attr_bytes_t value pointer but does not verify that the nested type_hint pointer is non-NULL when hint_length is greater than zero. When a caller supplies a positive hint_length together with a NULL type_hint, exr_attr_bytes_create() allocates a destination type-hint buffer and then copies from the NULL source pointer, causing a deterministic crash. The flaw is reachable through the public OpenEXRCore C API and results in a denial of service. The issue is fixed in version 3.4.13.

Засегнати продукти

• AcademySoftwareFoundation openexr: >= 3.4.0, < 3.4.13

Вид слабост

• CWE-20 Неправилно валидиране на входните данни
• CWE-476 Разименуване на NULL указател

История

Други уязвимости в AcademySoftwareFoundation openexr

• 7.1CVE-2026-59981
• 5.5CVE-2026-68514
• 7.1CVE-2026-68515
• 7.1CVE-2026-68513
• 6.7CVE-2026-65979

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-55371
• https://nvd.nist.gov/vuln/detail/CVE-2026-55371
• https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-xx72-f24p-cf6r