Executive brief
OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)
Affected products
- PyPI OpenEXR
Junglewise Threat Intelligence
CVE-2026-34543: PYSEC-2026-2850 - OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)
CVE-2026-34543 · Severity: medium · CVSS 4 · Published 2026-07-13
Technologies: OpenEXR (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2849 - OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp
- PYSEC-2026-2844 - OpenEXR has use after free in PyObject_StealAttrString
- PYSEC-2026-2851 - OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()
- PYSEC-2026-2843 - OpenEXR Makes Use of Uninitialized Memory
- PYSEC-2026-2847 - OpenEXR: integer overflow to OOB write in uncompress_b44_impl()