CVE-2026-40250
HIGH EPSS 35.9%
Published Apr 21, 20262mo ago · Modified Jun 17, 20262w ago
8.4 CVSS 4.0
Published Apr 21, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago
Description
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.4.0 through 3.4.9, 3.3.0 through 3.3.9, and 3.2.0 through 3.2.7, `internal_dwa_compressor.h:1040` performs `chan->width * chan->bytes_per_element` in `int32` arithmetic without a `(size_t)` cast. This is the same overflow pattern fixed in other decoders by CVE-2026-34589/34588/34544, but this line was missed. Versions 3.4.10, 3.3.10, and 3.2.8 contain a fix that addresses `internal_dwa_compressor.h:1040`.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction A
Scope X
Threat Intelligence
EPSS Exploit Probability
35.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-190 Integer Overflow or Wraparound Numeric Error
Affected Products 3
References 4
- github.com https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.8
- github.com https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.10
- github.com https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.10
- github.com https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-m5qw-23x2-6phj
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.