CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packed_data pointer. The OpaqueAttribute constructor passes the NULL pointer to memcpy() without validating the zero-size condition, resulting in undefined behavior and process termination, leading to denial of service.

• CWE-476

• https://github.com/AcademySoftwareFoundation/openexr/issues/2612
• https://github.com/AcademySoftwareFoundation/openexr/pull/2615
• https://github.com/AcademySoftwareFoundation/openexr/pull/2615/changes/70ddecfe82d2566f3776b8ed923939afd47baca2
• https://github.com/AcademySoftwareFoundation/openexr/issues/2612

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88376Bento4 1.6.0.0 contains an integer underflow vulnerability i…7.5
• CVE-2026-88377Bento4 1.6.0.0 contains an integer underflow vulnerability i…
• CVE-2026-88378QuickJS commit 04be24600 contains a heap out-of-bounds write…
• CVE-2026-8838Unsafe use of Python's eval() on server-received data in the…9.8
• CVE-2026-88382hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolle…7.5
• CVE-2026-88383libical 4.0.6 contains an incompatible function pointer in i…
• CVE-2026-88385Mini-XML 4.0.5 contains a memory leak vulnerability in mxml_…
• CVE-2026-88386libsndfile 1.2.2 contains a misaligned memory access issue i…5.5
• CVE-2026-88387LibRaw 0.22.0 contains an incorrect numeric conversion vulne…
• CVE-2026-88388Espruino 2v29 (commit bffc6d0) contains a stack-based buffer…7.5
• CVE-2026-88389Espruino 2v29 (commit bffc6d0) contains a NULL pointer deref…
• CVE-2026-8839The MapPress Maps for WordPress plugin for WordPress is vuln…5.3