CVE catalog
CVE-2023-5841
openexr affected and fixed versions
A vulnerability was found in the Academy Software Foundation OpenEXR and requires that a malicious EXR file image is parsed by the target device or environment using OpenEXR. This issue occurs due to a failure in validating the number of scanline samples of an OpenEXR file containing deep scanline data, allowing a read or write primitive based on the provided EXR file attributes. This flaw could be used to read or write memory to a compromised device through an attacker-placed EXR image. OpenEXR: Heap Overflow in Scanline Deep Data Parsing The heap-based buffer overflow vulnerability identified in the Academy Software Foundation's OpenEXR image parsing library represents an important security concern due to its potential for severe consequences and wide-reaching impact. By exploiting this vulnerability, attackers can execute arbitrary code or perform unauthorized read/write operations on affected systems. This ability to manipulate system memory poses a significant risk to data integrity, confidentiality, and system stability. Moreover, the vulnerability's presence in a widely-used image parsing library amplifies its severity. The ability to execute such attacks without user interaction, known as a 0-click attack surface, further amplifies the risk. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
- Severity
- Critical · CVSS 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.25% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "openexr",
"status": "fixed",
"release": "sid",
"version": "3.4.16+ds-1"
},
{
"name": "openexr",
"status": "fixed",
"release": "forky",
"version": "3.4.16+ds-1"
},
{
"name": "openexr",
"status": "fixed",
"release": "trixie",
"version": "3.1.13-2"
},
{
"name": "openexr",
"status": "vulnerable",
"release": "bookworm",
"version": "3.1.5-5"
}
],
"fixed_versions": [
{
"bug": 1063414,
"name": "openexr",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "3.1.13-1"
},
{
"bug": 1063414,
"name": "openexr",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "3.1.13-1"
},
{
"bug": 1063414,
"name": "openexr",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "3.1.13-1"
},
{
"bug": 1063414,
"name": "openexr",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "openexr",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"3.1.5-5.1",
"3.1.5-5.1build1",
"3.1.5-5.1build2",
"3.1.5-5.1build3",
"3.1.5-5.1ubuntu0.1~esm1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2023-5841"
}
]
}Publisher notes
[bookworm] openexr: Minor issue
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libopenexr-3-1-30]Unknown
Source package: [openexr]
Details (2)
3.1.5-5· amd64 · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
3.1.5-5· arm64 · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
- [libopenexr-dev]Unknown
Source package: [openexr]
Details (2)
3.1.5-5· amd64 · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
3.1.5-5· arm64 · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
- [libopenexr-doc]Unknown
Source package: [openexr]
Details (2)
3.1.5-5· all · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
3.1.5-5· all · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
- [openexr]Unknown
Details (2)
3.1.5-5· amd64 · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
3.1.5-5· arm64 · bookwormAffected
dsa · openexr · debian · bookworm; dsa · openexr · debian · 12
[Debian 13 (Trixie)]
- [libopenexr-3-1-30]Unknown
Source package: [openexr]
Details (2)
3.1.13-2· amd64 · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
3.1.13-2· arm64 · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
- [libopenexr-dev]Unknown
Source package: [openexr]
Details (2)
3.1.13-2· amd64 · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
3.1.13-2· arm64 · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
- [libopenexr-doc]Unknown
Source package: [openexr]
Details (2)
3.1.13-2· all · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
3.1.13-2· all · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
- [openexr]Unknown
Details (2)
3.1.13-2· amd64 · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
3.1.13-2· arm64 · trixieFixed · Fixed:
3.1.13-1dsa · openexr · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13683-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-5841]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2023-5841]
- [https://security-tracker.debian.org/tracker/CVE-2023-5841]
- [https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5841.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3336.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]