CVE-2017-9111: Openexr

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.

Affected products

• Openexr Openexr: version 2.2.0 only

Published 2017-05-21. Last modified 2026-06-17.