Known vulnerabilities in OpenEXR (Red Hat package)
Vendor:
Red Hat Inc.
Software:
OpenEXR (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openexr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
14
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.1.1-2.el9_2.4
3.1.1-2.el9_4.4
3.1.1-3.el9_6.3
3.1.10-8.el10_0.3
3.1.1-2.el9_0.3
3.1.1-3.el9_6.2
3.1.1-2.el9_2.3
3.1.1-2.el9_4.3
3.1.10-8.el10_0.2
3.1.10-8.el10_1.2
2.2.0-12.el8_4.1
2.2.0-11.el8_2.1
2.2.0-12.el8_6.1
2.2.0-12.el8_8.1
3.1.1-3.el9_7.1
3.1.10-8.el10_1.1
3.1.10-8.el10_0.1
3.1.1-2.el9_5.1
3.1.1-2.el9_0.1
3.1.1-2.el9_2.1
3.1.1-2.el9_4.1
2.2.0-12.el8
1.7.1-8.el7
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU129654 - Integer overflow CVE-2026-41142 |
CWE-190 | High | 3.1.1-2.el9_2.4, 3.1.1-2.el9_4.4, 3.1.1-3.el9_6.3, 3.1.10-8.el10_0.3 | 05.05.2026 |
SB2026050525 SB20260522139 SB20260522140 and 8 more |
||
| #VU129652 - Out-of-bounds read CVE-2026-42216 |
CWE-125 | Medium | 3.1.1-2.el9_2.4, 3.1.1-2.el9_4.4, 3.1.1-3.el9_6.3, 3.1.10-8.el10_0.3 | 05.05.2026 |
SB2026050525 SB20260522139 SB20260522140 and 7 more |
||
| #VU125329 - Integer overflow CVE-2026-34588 |
CWE-190 | Low | 3.1.1-2.el9_0.3, 3.1.1-2.el9_2.3, 3.1.1-3.el9_6.2, 3.1.10-8.el10_0.2, 3.1.10-8.el10_1.2 | 08.04.2026 |
SB2026040875 SB2026040885 SB2026040886 and 15 more |
||
| #VU125325 - Integer overflow CVE-2026-27622 |
CWE-190 | High | 2.2.0-11.el8_2.1, 2.2.0-12.el8_4.1, 2.2.0-12.el8_6.1, 2.2.0-12.el8_8.1, 3.1.1-3.el9_7.1, 3.1.10-8.el10_0.1, 3.1.10-8.el10_1.1 | 08.04.2026 |
SB2026040874 SB2026040879 SB2026040880 and 16 more |
||
| #VU86235 - Heap-based Buffer Overflow CVE-2023-5841 |
CWE-122 | High | 3.1.1-2.el9_0.1, 3.1.1-2.el9_2.1, 3.1.1-2.el9_4.1, 3.1.1-2.el9_5.1 | 07.02.2024 |
SB2024020753 SB2024020756 SB2024021705 and 15 more |
||
| #VU48720 - Use After Free CVE-2020-13543 |
CWE-416 | High | 2.2.0-12.el8 | 01.12.2020 |
SB2020112408 SB2020122344 SB2021040169 and 7 more |
||
| #VU48617 - Use After Free CVE-2020-13584 |
CWE-416 | High | 2.2.0-12.el8 | 24.11.2020 |
SB2020112408 SB2020112602 SB2020112618 and 11 more |
||
| #VU46804 - Out-of-bounds write CVE-2020-9983 |
CWE-787 | High | 2.2.0-12.el8 | 18.09.2020 |
SB2020091802 SB2020112408 SB2020112602 and 13 more |
||
| #VU46802 - Use After Free CVE-2020-9951 |
CWE-416 | High | 2.2.0-12.el8 | 18.09.2020 |
SB2020091802 SB2020112408 SB2020112602 and 14 more |
||
| #VU46801 - Type confusion CVE-2020-9948 |
CWE-843 | High | 2.2.0-12.el8 | 18.09.2020 |
SB2020091802 SB2020112408 SB2020112602 and 14 more |
||
| #VU34465 - Out-of-bounds read CVE-2020-11761 |
CWE-125 | Medium | 1.7.1-8.el7 | 15.04.2020 |
SB2020041525 SB2020083124 SB2020093012 and 5 more |
||
| #VU34467 - Out-of-bounds write CVE-2020-11763 |
CWE-787 | Medium | 1.7.1-8.el7 | 15.04.2020 |
SB2020041525 SB2020083124 SB2020093012 and 5 more |
||
| #VU34468 - Out-of-bounds write CVE-2020-11764 |
CWE-787 | Medium | 1.7.1-8.el7 | 15.04.2020 |
SB2020041525 SB2020083124 SB2020093012 and 5 more |
||
| #VU18944 - Incorrect Default Permissions CVE-2019-13012 |
CWE-276 | Low | 2.2.0-12.el8 | 29.06.2019 |
SB2019062905 SB2019072003 SB2019091144 and 9 more |