Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the first tile outside the visible image can reach invalid tile and codeblock geometry in the vendored OpenJPH AVX2 decoder, causing a stack out-of-bounds write and denial of service. OpenEXR's HTJ2K path validates the decoded codestream dimensions against the EXR chunk size, but it does not reject SIZ image-offset/tile-grid geometry where the first tile does not intersect the image. This issue is fixed in version 3.4.14.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-24 | 2 | General2 |
| 2026-08-25 | 1 | Disclosure1 |
CVE-2026-68516 Denial of Service in OpenEXR 3.4.0-3.4.13 via Crafted HTJ2K EXR https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-68516
Post summary
The text announces a denial‑of‑service vulnerability in OpenEXR 3.4.0‑3.4.13 that can be triggered by crafted HTJ2K EXR files; no exploitation evidence or patch information is provided.
🚨*CVE* CVE-2026-68516 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a c… https://www.cve.org/CVERecord?id=CVE-2026-68516 ----- Traducción: CVE-2026-68516 Ope… https://infoflow.cloud`
Post summary
The text merely points to the existence of CVE‑2026‑68516 for OpenEXR with no further technical context.
CVE-2026-68516 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a c… https://www.cve.org/CVERecord?id=CVE-2026-68516
Post summary
The entry references CVE‑2026‑68516 for specific OpenEXR versions but offers no detailed technical or mitigation information.