CVE catalog

CVE-2026-88384

Severity: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: Sep 24, 2026, 12:00:00 AM UTC
Updated: Sep 24, 2026, 5:17:07 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.19% · Oct 25, 2026

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packed_data pointer. The OpaqueAttribute constructor passes the NULL pointer to memcpy() without validating the zero-size condition, resulting in undefined behavior and process termination, leading to denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openexr	sid	`3.4.16+ds-1`	fixed
Debian	openexr	forky	`3.4.16+ds-1`	fixed
Debian	openexr	trixie	`3.1.13-2`	vulnerable
Debian	openexr	bookworm	`3.1.5-5`	vulnerable
Suse	openexr	linux enterprise server 16.0	`3.2.2-160000.11.1`	fixed
Suse	openexr	linux enterprise server for sap applications 16.0	`3.2.2-160000.11.1`	fixed
Suse	openexr	linux enterprise server ltss extended security 12 sp5	`2.1.0-6.54.1`	fixed
Opensuse	openexr	leap 16.0	`3.2.2-160000.11.1`	fixed
Opensuse	openexr	tumbleweed	`3.4.15-1.1`	fixed
Suse	openexr	linux enterprise module for desktop applications 15 sp7	`2.2.1-150000.3.58.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openexr	source	sid	`3.4.16+ds-1`	not yet assigned	Not reported	[1149061]
Debian	openexr	source	forky	`3.4.16+ds-1`	not yet assigned	Not reported	[1149061]
Debian	openexr	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1149061]
Debian	openexr	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1149061]
Suse	openexr	rpm	linux enterprise server 16.0	`3.2.2-160000.11.1`	Not reported	SUSE-SU-2026:24012-1	Not reported
Suse	openexr	rpm	linux enterprise server for sap applications 16.0	`3.2.2-160000.11.1`	Not reported	SUSE-SU-2026:24012-1	Not reported
Suse	openexr	rpm	linux enterprise server ltss extended security 12 sp5	`2.1.0-6.54.1`	Not reported	SUSE-SU-2026:4532-1	Not reported
Opensuse	openexr	rpm	leap 16.0	`3.2.2-160000.11.1`	Not reported	OPENSUSE-SU-2026:22013-1	Not reported
Opensuse	openexr	rpm	tumbleweed	`3.4.15-1.1`	Not reported	OPENSUSE-SU-2026:11934-1	Not reported
Suse	openexr	rpm	linux enterprise module for desktop applications 15 sp7	`2.2.1-150000.3.58.1`	Not reported	SUSE-SU-2026:4828-1	Not reported

[Debian bug #1149061]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libopenexr-3-1-30]Affected
Source package: [openexr]
Details (2)
- 3.1.5-5 · amd64 · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
- 3.1.5-5 · arm64 · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
[libopenexr-dev]Affected
Source package: [openexr]
Details (2)
- 3.1.5-5 · amd64 · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
- 3.1.5-5 · arm64 · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
[libopenexr-doc]Affected
Source package: [openexr]
Details (2)
- 3.1.5-5 · all · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
- 3.1.5-5 · all · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
[openexr]Affected
Details (2)
- 3.1.5-5 · amd64 · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12
- 3.1.5-5 · arm64 · bookworm
  Affected
  nvd · openexr · debian · bookworm; nvd · openexr · debian · 12

[Debian 13 (Trixie)]

[libopenexr-3-1-30]Affected
Source package: [openexr]
Details (2)
- 3.1.13-2 · amd64 · trixie
  Affected
  nvd · openexr · debian · 13
- 3.1.13-2 · arm64 · trixie
  Affected
  nvd · openexr · debian · 13
[libopenexr-dev]Affected
Source package: [openexr]
Details (2)
- 3.1.13-2 · amd64 · trixie
  Affected
  nvd · openexr · debian · 13
- 3.1.13-2 · arm64 · trixie
  Affected
  nvd · openexr · debian · 13
[libopenexr-doc]Affected
Source package: [openexr]
Details (2)
- 3.1.13-2 · all · trixie
  Affected
  nvd · openexr · debian · 13
- 3.1.13-2 · all · trixie
  Affected
  nvd · openexr · debian · 13
[openexr]Affected
Details (2)
- 3.1.13-2 · amd64 · trixie
  Affected
  nvd · openexr · debian · 13
- 3.1.13-2 · arm64 · trixie
  Affected
  nvd · openexr · debian · 13

[openSUSE Tumbleweed]

[openexr]Affected
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Affected · Fixed: 3.4.15-1.1
  nvd · openexr · opensuse · tumbleweed
[libIex-3_4-33]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libIex-3_4-33-32bit]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libIex-3_4-33-x86-64-v3]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libIlmThread-3_4-33]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libIlmThread-3_4-33-32bit]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libIlmThread-3_4-33-x86-64-v3]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libOpenEXR-3_4-33]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libOpenEXR-3_4-33-32bit]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libOpenEXR-3_4-33-x86-64-v3]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libOpenEXRCore-3_4-33]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed
[libOpenEXRCore-3_4-33-32bit]Unknown
Source package: [openexr]
Details (1)
- 3.4.14-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.4.15-1.1
  Version impact unknown
  nvd · openexr · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 8:26:10 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]