CVE-2026-55373 - OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
Brief
CVE ID : CVE-2026-55373
Published : Aug. 25, 2026, 12:39 a. m.
- 32 minutes ago
Description : OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.
- 10, 3.
- 12, and 3.
- 13 contain an infinite-loop vulnerability in SampleCountChannel.
The helper roundListSizeUp() rounds a sample-list size up to the next power of two using repeated unsigned left shifts, which terminates for normal values but fails for UINT_MAX: the sequence reaches 0x80000000, and the next left shift wraps the 32-bit value to 0. Because 0 remains less than UINT_MAX, the loop never progresses and never exits.