CVE-2026-59985: Openexr Ilp32 Unpacked Size Truncationcve-2026-59985-openexr-ilp32-unpacked-size-truncation
64-bit chunk.unpacked_size is passed to internal_decode_alloc_buffer without checking if it exceeds size_t capacity on 32-bit architectures, which can lead to integer truncation and out-of-bounds heap operations.