CVE-2017-9113: Openexr

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.

Affected products

• Openexr Openexr: version 2.2.0 only

Published 2017-05-21. Last modified 2026-06-17.