CVE-2026-63422
Description
A flaw was found in OpenImageIO. When processing specially crafted tiled OpenEXR images, where the image width is not a multiple of its tile width, a heap out-of-bounds write can occur. This vulnerability arises from incorrect calculation of scanline stride during tile reading, leading to memory corruption. A remote attacker could exploit this flaw by providing a malicious image, potentially leading to a denial of service or arbitrary code execution.
Statement
Important severity is assigned to this flaw because parsing a malformed OpenEXR image can trigger out-of-bounds memory writes on the heap, creating the potential for arbitrary code execution or an application crash. Exploitation depends on an entity or automated service opening an untrusted graphic asset, constraining the blast radius to the operational privileges of the target process. Furthermore, OpenImageIO is not shipped within the core Red Hat Enterprise Linux operating system, limiting the attack surface in standard enterprise environments.
Mitigation
To mitigate this issue, avoid processing untrusted OpenEXR image files with applications that utilize OpenImageIO. Limiting the sources of OpenEXR images to trusted origins can reduce the exposure to this vulnerability.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
