CVE-2026-55371

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exr_attr_set_bytes(). The public setter validates the top-level exr_attr_bytes_t value pointer but does not verify that the nested type_hint pointer is non-NULL when hint_length is greater than zero. When a caller supplies a positive hint_length together with a NULL type_hint, exr_attr_bytes_create() allocates a destination type-hint buffer and then copies from the NULL source pointer, causing a deterministic crash. The flaw is reachable through the public OpenEXRCore C API and results in a denial of service. The issue is fixed in version 3.4.13.

• CWE-20
• CWE-476

• https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-xx72-f24p-cf6r

Published

Aug 25, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55359In multiple locations, there is a possible permission bypass…7.8
• CVE-2026-5536A weakness has been identified in FedML-AI FedML up to 0.8.9…7.3
• CVE-2026-55365In multiple functions of remap.c, there is a possible out-of…6.7
• CVE-2026-55366In IP Multimedia Subsystem, there is a possible authenticati…9.8
• CVE-2026-5537A security vulnerability has been detected in halex CourseSE…6.3
• CVE-2026-55370Logto is the modern, open-source auth infrastructure for Saa…6.4
• CVE-2026-55373OpenEXR is the reference implementation and specification fo…6.2
• CVE-2026-55374canto-saas-api is a PHP library for interacting with the Can…4.8
• CVE-2026-55375canto-saas-api is a PHP library for interacting with the Can…5.3
• CVE-2026-55377Logto is the modern, open-source auth infrastructure for Saa…8.1
• CVE-2026-55378JS Recon is a JavaScript enumeration and SAST tool. From 1.2…9.3
• CVE-2026-55379Pillow is a Python imaging library. Prior to 12.3.0, PIL/Bdf…7.5