FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OpenEXR < 3.4.3 -- multiple vulnerabilities

Affected packages
openexr < 3.4.3

Details

VuXML ID c71a3914-ba96-11f0-aada-f59a8ea34d12
Discovery 2025-10-29
Entry 2025-11-05

Cary Phillips reports:

Patch release that addresses several bugs, primarily involving properly rejecting corrupt input data.

He goes on to report various relevant items including heap buffer overflows, use-after-free, use of uninitialized memory and other bugs, several of them found by OSS-fuzz, and some also found in OpenJPH.

References

URL https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.3