CVE-2026-34543: Openexr Bounds Check Capacity Mismatch
Bounds checking against the expected uncompressed capacity rather than the actual decompressed payload length may lead to out-of-bounds reads into uninitialized memory.
Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0c
greprules fetch cve-2026-34543-openexr-bounds-check-capacity-mismatch --engine opengrepDescription
Bounds checking against the expected uncompressed capacity rather than the actual decompressed payload length may lead to out-of-bounds reads into uninitialized memory.
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.