VulnSocial

CVE-2026-34589Disclosure(openexr / openexr)

LOWCVSS 5.0 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, the DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.

openexr CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-190CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openexr

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
openexr
Products
openexr

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-06: 204-06
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-34589 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before … https://www.cve.org/CVERecord?id=CVE-2026-34589 ----- Traducción: CVE-2026-34589 Ope… http://infoflow.cloud`

    Post summary

    The tweet is a brief CVE announcement for CVE-2026-34589, offering minimal detail about the vulnerability, no exploit, patch, or exploitation status.

    0000030
    67 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34589 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before … https://www.cve.org/CVERecord?id=CVE-2026-34589

    Post summary

    The excerpt briefly announces CVE-2026-34589, noting the affected OpenEXR versions and linking to the CVE record, but provides no further exploit, mitigation, or technical details.

    00000200
    57.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenexropenexr---

Explore more

Back to dashboardopenexr CVEsopenexr vulnerabilities