UnratedFix available
openexr vulnerabilities
Type: advisorySources: OSV
Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-27622) It was discovered that OpenEXR had an integer overflow in the PXR24 decoder. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34380) Quang Luong discovered that OpenEXR had a signed integer overflow in the PIZ decoder. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34588)
- Products
- openexr
- Affected versions
- 2.2.0-10ubuntu2, 2.2.0-10ubuntu2.1, 2.2.0-10ubuntu2.2, 2.2.0-10ubuntu2.3, 2.2.0-10ubuntu2.4, 2.2.0-10ubuntu2.6, 2.2.0-10ubuntu2.6+esm1, 2.2.0-10ubuntu2.6+esm2, 2.2.0-10ubuntu2.6+esm3, 2.2.0-11.1ubuntu1, 2.2.0-11.1ubuntu1.1, 2.2.0-11.1ubuntu1.2, 2.2.0-11.1ubuntu1.3, 2.2.0-11.1ubuntu1.4, 2.2.0-11.1ubuntu1.6, 2.2.0-11.1ubuntu1.7, 2.2.0-11.1ubuntu1.8, 2.2.0-11.1ubuntu1.9, 2.2.0-11ubuntu1, 2.2.0-1ubuntu3, 2.2.0-7ubuntu1, 2.2.0-9ubuntu1, 2.2.1-4.1ubuntu1, 2.3.0-6, 2.3.0-6build1, 2.3.0-6ubuntu0.1, 2.3.0-6ubuntu0.2, 2.3.0-6ubuntu0.3, 2.3.0-6ubuntu0.5, 2.3.0-6ubuntu0.5+esm1, 2.5.4-2, 2.5.7-1, 2.5.7-1ubuntu0.1~esm1, 3.1.13-2, 3.1.13-2build1, 3.1.5-5.1, 3.1.5-5.1build1, 3.1.5-5.1build2, 3.1.5-5.1build3
- Fixed versions
- 2.2.0-10ubuntu2.6+esm4, 2.2.0-11.1ubuntu1.9+esm1, 2.3.0-6ubuntu0.5+esm2, 2.5.7-1ubuntu0.1~esm2, 3.1.13-2ubuntu0.26.04.1~esm1, 3.1.5-5.1ubuntu0.1~esm1
- CVEs
- CVE-2026-27622, CVE-2026-34380, CVE-2026-34588
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 17:14 UTC · Revision 1
Source evidence
Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-27622) It was discovered that OpenEXR had an integer overflow in the PXR24 decoder. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34380) Quang Luong discovered that OpenEXR had a signed integer overflow in the PIZ decoder. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34588)
osv:USN-8259-1
openexr
Fixed versions: 2.2.0-10ubuntu2.6+esm4
openexr
Fixed versions: 2.2.0-11.1ubuntu1.9+esm1
openexr
Fixed versions: 2.3.0-6ubuntu0.5+esm2
openexr
Fixed versions: 2.5.7-1ubuntu0.1~esm2
openexr
Fixed versions: 3.1.5-5.1ubuntu0.1~esm1
openexr
Fixed versions: 3.1.13-2ubuntu0.26.04.1~esm1
Complete source record
{
"id": "447d747e16ea52691d5f22a581648ede61007c047de3653cc8755b69c211b891",
"url": "https://osv.dev/vulnerability/USN-8259-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "openexr vulnerabilities",
"summary": "Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-27622) It was discovered that OpenEXR had an integer overflow in the PXR24 decoder. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34380) Quang Luong discovered that OpenEXR had a signed integer overflow in the PIZ decoder. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34588)",
"evidence": "osv:USN-8259-1",
"products": [
{
"name": {
"value": "openexr",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.2.0-10ubuntu2.6+esm4",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "2.2.0-1ubuntu3",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-7ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-9ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.2",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.3",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.4",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.6",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.6+esm1",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.6+esm2",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.0-10ubuntu2.6+esm3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "openexr",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.2.0-11.1ubuntu1.9+esm1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "2.2.0-11ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.1",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.2",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.3",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.4",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.6",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.7",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.8",
"evidence": "/affected/1/versions"
},
{
"value": "2.2.0-11.1ubuntu1.9",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "openexr",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.3.0-6ubuntu0.5+esm2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "2.2.1-4.1ubuntu1",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6build1",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6ubuntu0.1",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6ubuntu0.2",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6ubuntu0.3",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6ubuntu0.5",
"evidence": "/affected/2/versions"
},
{
"value": "2.3.0-6ubuntu0.5+esm1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "openexr",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.5.7-1ubuntu0.1~esm2",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": [
{
"value": "2.5.4-2",
"evidence": "/affected/3/versions"
},
{
"value": "2.5.7-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.5.7-1ubuntu0.1~esm1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "openexr",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.1.5-5.1ubuntu0.1~esm1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": [
{
"value": "3.1.5-5.1",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.5-5.1build1",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.5-5.1build2",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.5-5.1build3",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "openexr",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.1.13-2ubuntu0.26.04.1~esm1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": [
{
"value": "3.1.13-2",
"evidence": "/affected/5/versions"
},
{
"value": "3.1.13-2build1",
"evidence": "/affected/5/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "USN-8259-1",
"aliases": [
"USN-8259-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.2.0-10ubuntu2.6+esm4"
}
]
}
],
"package": {
"name": "openexr",
"purl": "pkg:deb/ubuntu/openexr?arch=source&distro=esm-infra%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"2.2.0-1ubuntu3",
"2.2.0-7ubuntu1",
"2.2.0-9ubuntu1",
"2.2.0-10ubuntu2",
"2.2.0-10ubuntu2.1",
"2.2.0-10ubuntu2.2",
"2.2.0-10ubuntu2.3",
"2.2.0-10ubuntu2.4",
"2.2.0-10ubuntu2.6",
"2.2.0-10ubuntu2.6+esm1",
"2.2.0-10ubuntu2.6+esm2",
"2.2.0-10ubuntu2.6+esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8259-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-27622",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libopenexr22",
"binary_version": "2.2.0-10ubuntu2.6+esm4"
},
{
"binary_name": "openexr",
"binary_version": "2.2.0-10ubuntu2.6+esm4"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.2.0-11.1ubuntu1.9+esm1"
}
]
}
],
"package": {
"name": "openexr",
"purl": "pkg:deb/ubuntu/openexr?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.2.0-11ubuntu1",
"2.2.0-11.1ubuntu1",
"2.2.0-11.1ubuntu1.1",
"2.2.0-11.1ubuntu1.2",
"2.2.0-11.1ubuntu1.3",
"2.2.0-11.1ubuntu1.4",
"2.2.0-11.1ubuntu1.6",
"2.2.0-11.1ubuntu1.7",
"2.2.0-11.1ubuntu1.8",
"2.2.0-11.1ubuntu1.9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8259-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-27622",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:18.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libopenexr22",
"binary_version": "2.2.0-11.1ubuntu1.9+esm1"
},
{
"binary_name": "openexr",
"binary_version": "2.2.0-11.1ubuntu1.9+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.3.0-6ubuntu0.5+esm2"
}
]
}
],
"package": {
"name": "openexr",
"purl": "pkg:deb/ubuntu/openexr?arch=source&distro=esm-apps%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.2.1-4.1ubuntu1",
"2.3.0-6",
"2.3.0-6build1",
"2.3.0-6ubuntu0.1",
"2.3.0-6ubuntu0.2",
"2.3.0-6ubuntu0.3",
"2.3.0-6ubuntu0.5",
"2.3.0-6ubuntu0.5+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8259-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-27622",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:20.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libopenexr24",
"binary_version": "2.3.0-6ubuntu0.5+esm2"
},
{
"binary_name": "openexr",
"binary_version": "2.3.0-6ubuntu0.5+esm2"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.5.7-1ubuntu0.1~esm2"
}
]
}
],
"package": {
"name": "openexr",
"purl": "pkg:deb/ubuntu/openexr?arch=source&distro=esm-apps%2Fjammy",
"ecosystem": "Ubuntu:Pro:22.04:LTS"
},
"versions": [
"2.5.4-2",
"2.5.7-1",
"2.5.7-1ubuntu0.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8259-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-27622",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:22.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libopenexr25",
"binary_version": "2.5.7-1ubuntu0.1~esm2"
},
{
"binary_name": "openexr",
"binary_version": "2.5.7-1ubuntu0.1~esm2"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.5-5.1ubuntu0.1~esm1"
}
]
}
],
"package": {
"name": "openexr",
"purl": "pkg:deb/ubuntu/openexr?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"3.1.5-5.1",
"3.1.5-5.1build1",
"3.1.5-5.1build2",
"3.1.5-5.1build3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8259-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-27622",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34380",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34588",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:24.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libopenexr-3-1-30",
"binary_version": "3.1.5-5.1ubuntu0.1~esm1"
},
{
"binary_name": "openexr",
"binary_version": "3.1.5-5.1ubuntu0.1~esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.13-2ubuntu0.26.04.1~esm1"
}
]
}
],
"package": {
"name": "openexr",
"purl": "pkg:deb/ubuntu/openexr?arch=source&distro=esm-apps%2Fresolute",
"ecosystem": "Ubuntu:Pro:26.04:LTS"
},
"versions": [
"3.1.13-2",
"3.1.13-2build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8259-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2026-27622",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34380",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34588",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:26.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libopenexr-3-1-30",
"binary_version": "3.1.13-2ubuntu0.26.04.1~esm1"
},
{
"binary_name": "openexr",
"binary_version": "3.1.13-2ubuntu0.26.04.1~esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
}
],
"modified": "2026-10-27T04:15:33.519792176Z",
"provider": "osv",
"upstream": [
"CVE-2026-27622",
"CVE-2026-34380",
"CVE-2026-34588",
"UBUNTU-CVE-2026-27622",
"UBUNTU-CVE-2026-34380",
"UBUNTU-CVE-2026-34588"
],
"references": [
"https://ubuntu.com/security/notices/USN-8259-1",
"https://ubuntu.com/security/CVE-2026-27622",
"https://ubuntu.com/security/CVE-2026-34380",
"https://ubuntu.com/security/CVE-2026-34588"
]
},
"related_cves": [
{
"value": "CVE-2026-27622",
"evidence": "/upstream"
},
{
"value": "CVE-2026-34380",
"evidence": "/upstream"
},
{
"value": "CVE-2026-34588",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 460175,
"published_at": "2026-05-07T15:37:21+00:00"
}