CVE-2026-59189: Openexr Channel Row Oob Base Offset

Calculating row pointers from `_base` in OpenEXR channel classes leads to out-of-bounds pointer calculations when the data window origin is non-zero. Use the direct buffer pointer (`_pixels`, `_sampleListPointers`, or `_numSamples`) instead.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-59189-openexr-channel-row-oob-base-offset --engine opengrep

Description

Calculating row pointers from `_base` in OpenEXR channel classes leads to out-of-bounds pointer calculations when the data window origin is non-zero. Use the direct buffer pointer (`_pixels`, `_sampleListPointers`, or `_numSamples`) instead.