n/a OpenEXR

Name: n/a OpenEXR
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high17medium0low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-23169US	high8.8	2.29% (83rd)	—	no fix	2021-06-08	≤ OpenEXR 3.0.1
CVE-2021-20304US	high7.5	2.07% (81st)	—	no fix	2022-08-23	≤ Fixed in OpenEXR 3.0.0-beta
CVE-2021-3476US	medium5.3	1.85% (79th)	—	no fix	2021-03-30	≤ OpenEXR 3.0.0-beta
CVE-2021-3475US	medium5.3	1.85% (79th)	—	no fix	2021-03-30	≤ OpenEXR 3.0.0-beta
CVE-2021-3474US	medium5.3	1.85% (79th)	—	no fix	2021-03-30	≤ OpenEXR 3.0.0-beta
CVE-2021-20299US	high7.5	1.77% (78th)	—	no fix	2022-03-16	≤ Affected before v2.5.4
CVE-2021-20296US	medium5.3	1.75% (78th)	—	no fix	2021-04-01	≤ OpenEXR 3.0.0-beta
CVE-2021-20298US	high7.5	1.57% (75th)	—	no fix	2022-08-23	≤ Fixed in OpenEXR 3.0.0-beta
CVE-2021-23215US	medium5.5	1.10% (66th)	—	no fix	2021-06-08	≤ OpenEXR 3.0.1
CVE-2021-26260US	medium5.5	1.05% (64th)	—	no fix	2021-06-08	≤ OpenEXR 3.0.1
CVE-2021-3605US	medium5.5	0.97% (62nd)	—	no fix	2021-08-25	≤ OpenEXR 3.0.5
CVE-2021-3479US	medium5.5	0.96% (61st)	—	no fix	2021-03-31	≤ OpenEXR 3.0.0-beta
CVE-2021-3478US	medium5.5	0.96% (61st)	—	no fix	2021-03-31	≤ OpenEXR 3.0.0-beta
CVE-2021-3477US	medium5.5	0.96% (61st)	—	no fix	2021-03-31	≤ OpenEXR 3.0.0-beta
CVE-2021-20302US	medium5.5	0.91% (60th)	—	no fix	2022-03-04	≤ Fixed in v2.5.4 and beyond.
CVE-2021-20300US	medium5.5	0.89% (59th)	—	no fix	2022-03-04	≤ Fixed in v2.5.4 and beyond.
CVE-2021-3933US	medium5.5	0.84% (58th)	—	no fix	2022-03-25	≤ OpenEXR 3.1.2
CVE-2021-20303US	medium6.1	0.82% (57th)	—	no fix	2022-03-04	≤ Fixed in v2.5.4 and beyond.
CVE-2021-26945US	medium5.5	0.67% (52nd)	—	no fix	2021-06-08	≤ OpenEXR 3.0.1
CVE-2021-3598US	medium5.5	0.42% (36th)	—	no fix	2021-07-06	≤ OpenEXR 3.0.5
CVE-2021-3941US	medium6.5	0.30% (23rd)	—	no fix	2022-03-25	≤ OpenEXR 3.1.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-190Integer Overflow or Wraparound11 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan