CVE-2017-9115: Openexr

High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days.

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.

Affected products

• Openexr Openexr: version 2.2.0 only

Published 2017-05-21. Last modified 2026-06-17.