{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34545.json" } ], "title": "OpenEXR: OpenEXR: Remote code execution via crafted EXR files", "tracking": { "current_release_date": "2026-06-30T03:52:28+00:00", "generator": { "date": "2026-06-30T03:52:28+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.0" } }, "id": "CVE-2026-34545", "initial_release_date": "2026-04-01T20:51:45.884000+00:00", "revision_history": [ { "date": "2026-04-01T20:51:45.884000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-04-07T20:14:12+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-06-30T03:52:28+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 10", "product": { "name": "Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6", "product": { "name": "Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "category": "product_version", "name": "OpenEXR.src", "product": { "name": "OpenEXR.src", "product_id": "OpenEXR.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/OpenEXR?arch=src" } } }, { "category": "product_version", "name": "OpenEXR-devel", "product": { "name": "OpenEXR-devel", "product_id": "OpenEXR-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/OpenEXR-devel" } } }, { "category": "product_version", "name": "OpenEXR-libs", "product": { "name": "OpenEXR-libs", "product_id": "OpenEXR-libs", "product_identification_helper": { "purl": "pkg:rpm/redhat/OpenEXR-libs" } } }, { "category": "product_version", "name": "OpenEXR", "product": { "name": "OpenEXR", "product_id": "OpenEXR", "product_identification_helper": { "purl": "pkg:rpm/redhat/OpenEXR" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "OpenEXR.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:OpenEXR.src" }, "product_reference": "OpenEXR.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR-devel as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:OpenEXR-devel" }, "product_reference": "OpenEXR-devel", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR-libs as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:OpenEXR-libs" }, "product_reference": "OpenEXR-libs", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR.src as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:OpenEXR.src" }, "product_reference": "OpenEXR.src", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:OpenEXR" }, "product_reference": "OpenEXR", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR-devel as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:OpenEXR-devel" }, "product_reference": "OpenEXR-devel", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR-libs as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:OpenEXR-libs" }, "product_reference": "OpenEXR-libs", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:OpenEXR.src" }, "product_reference": "OpenEXR.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR-devel as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:OpenEXR-devel" }, "product_reference": "OpenEXR-devel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR-libs as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:OpenEXR-libs" }, "product_reference": "OpenEXR-libs", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:OpenEXR.src" }, "product_reference": "OpenEXR.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "OpenEXR.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:OpenEXR.src" }, "product_reference": "OpenEXR.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-34545", "cwe": { "id": "CWE-1284", "name": "Improper Validation of Specified Quantity in Input" }, "discovery_date": "2026-04-01T22:02:15.810684+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_enterprise_linux_10:OpenEXR.src", "red_hat_enterprise_linux_7:OpenEXR", "red_hat_enterprise_linux_7:OpenEXR-devel", "red_hat_enterprise_linux_7:OpenEXR-libs", "red_hat_enterprise_linux_7:OpenEXR.src", "red_hat_enterprise_linux_8:OpenEXR-devel", "red_hat_enterprise_linux_8:OpenEXR-libs", "red_hat_enterprise_linux_8:OpenEXR.src", "red_hat_enterprise_linux_9:OpenEXR.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2454139" } ], "notes": [ { "category": "description", "text": "A flaw was found in OpenEXR, an image storage format for the motion picture industry. An attacker can exploit this vulnerability by providing a specially crafted .exr file with HTJ2K compression and a specific channel width. This allows controlled data to be written beyond the output heap buffer, leading to a heap write overflow. This issue can ultimately result in remote code execution on systems that decode these malicious EXR images.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenEXR: OpenEXR: Remote code execution via crafted EXR files", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important vulnerability in OpenEXR that could lead to remote code execution. The flaw occurs when processing a specially crafted EXR image file with HTJ2K compression and a specific channel width, resulting in a heap write overflow. Red Hat products that utilize OpenEXR for image decoding are affected if they process untrusted EXR files.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_enterprise_linux_6:OpenEXR-devel", "red_hat_enterprise_linux_6:OpenEXR-libs", "red_hat_enterprise_linux_6:OpenEXR.src" ], "known_not_affected": [ "red_hat_enterprise_linux_10:OpenEXR.src", "red_hat_enterprise_linux_7:OpenEXR", "red_hat_enterprise_linux_7:OpenEXR-devel", "red_hat_enterprise_linux_7:OpenEXR-libs", "red_hat_enterprise_linux_7:OpenEXR.src", "red_hat_enterprise_linux_8:OpenEXR-devel", "red_hat_enterprise_linux_8:OpenEXR-libs", "red_hat_enterprise_linux_8:OpenEXR.src", "red_hat_enterprise_linux_9:OpenEXR.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-34545" }, { "category": "external", "summary": "RHBZ#2454139", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454139" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34545", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34545" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34545", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34545" }, { "category": "external", "summary": "https://github.com/AcademySoftwareFoundation/openexr/commit/3827998f5c041d6a94c6af24bbb363daa669e4b3", "url": "https://github.com/AcademySoftwareFoundation/openexr/commit/3827998f5c041d6a94c6af24bbb363daa669e4b3" }, { "category": "external", "summary": "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.7", "url": "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.7" }, { "category": "external", "summary": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-ghfj-fx47-wg97", "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-ghfj-fx47-wg97" } ], "release_date": "2026-04-01T20:51:45.884000+00:00", "remediations": [ { "category": "workaround", "details": "Restrict the processing of untrusted OpenEXR image files. Systems should be configured to only decode .exr files from known and trusted sources to prevent exploitation of the heap write overflow vulnerability. This operational control limits exposure to malicious input.", "product_ids": [ "red_hat_enterprise_linux_6:OpenEXR-devel", "red_hat_enterprise_linux_6:OpenEXR-libs", "red_hat_enterprise_linux_6:OpenEXR.src" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "red_hat_enterprise_linux_6:OpenEXR-devel", "red_hat_enterprise_linux_6:OpenEXR-libs", "red_hat_enterprise_linux_6:OpenEXR.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "red_hat_enterprise_linux_10:OpenEXR.src", "red_hat_enterprise_linux_6:OpenEXR-devel", "red_hat_enterprise_linux_6:OpenEXR-libs", "red_hat_enterprise_linux_6:OpenEXR.src", "red_hat_enterprise_linux_7:OpenEXR", "red_hat_enterprise_linux_7:OpenEXR-devel", "red_hat_enterprise_linux_7:OpenEXR-libs", "red_hat_enterprise_linux_7:OpenEXR.src", "red_hat_enterprise_linux_8:OpenEXR-devel", "red_hat_enterprise_linux_8:OpenEXR-libs", "red_hat_enterprise_linux_8:OpenEXR.src", "red_hat_enterprise_linux_9:OpenEXR.src" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "red_hat_enterprise_linux_10:OpenEXR.src", "red_hat_enterprise_linux_6:OpenEXR-devel", "red_hat_enterprise_linux_6:OpenEXR-libs", "red_hat_enterprise_linux_6:OpenEXR.src", "red_hat_enterprise_linux_7:OpenEXR", "red_hat_enterprise_linux_7:OpenEXR-devel", "red_hat_enterprise_linux_7:OpenEXR-libs", "red_hat_enterprise_linux_7:OpenEXR.src", "red_hat_enterprise_linux_8:OpenEXR-devel", "red_hat_enterprise_linux_8:OpenEXR-libs", "red_hat_enterprise_linux_8:OpenEXR.src", "red_hat_enterprise_linux_9:OpenEXR.src" ] } ], "title": "OpenEXR: OpenEXR: Remote code execution via crafted EXR files" } ] }