SUSE-SU-2026:4828-1
SUSE-SU-2026:4828-1 · Security update for openexr
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
openexr SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
- Affected ranges
- ECOSYSTEM: < 2.2.1-150000.3.58.1
Update to 2.2.1-150000.3.58.1