CVE-2026-55373 | CVSS: 6.2 | 严重级别: MEDIUM
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp() rounds a sample-list size up to the next power of two using repeated unsigned left shifts, which terminates for normal values but fails for UINT_MAX: the sequence reaches 0x80000000, and the next left shift wraps the 32-bit value to 0. Because 0 remains less than UINT_MAX, the loop never progresses and never exits. The bug is reachabl
参考链接:
• https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-mf
• https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-mf
📌 数据来源: NVD 官方