CVE-2026-42217: OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, readVariableLengthInteger() decodes a variable-length integer from untrusted EXR input without bounding the shift count. After enough continuation bytes, the code executes a left shift by 70 on a 64-bit value, which is undefined behavior. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42217?
CVE-2026-42217 is classified as a high severity vulnerability due to the potential for exploitation leading to denial of service or unintended behavior.
How do I fix CVE-2026-42217?
To remediate CVE-2026-42217, users should upgrade to versions of OpenEXR that are not affected, specifically version 3.2.9 or later, 3.3.11 or later, or 3.4.11 or later.
What versions are affected by CVE-2026-42217?
CVE-2026-42217 affects OpenEXR versions from 3.0.0 to before 3.2.9, and from 3.3.0 to before 3.3.11, as well as from 3.4.0 to before 3.4.11.
What is the impact of CVE-2026-42217?
The impact of CVE-2026-42217 includes potential overflow issues that can lead to application crashes or security vulnerabilities in the handling of EXR files.
Who is responsible for fixing CVE-2026-42217?
The responsibility for fixing CVE-2026-42217 falls on developers and users of OpenEXR to update to the patched versions.