CVE-2023-5841

CVE-2023-5841: OpenEXR Heap Overflow in Scanline Deep Data Parsing

Vendor Academy Software Foundation

Product OpenEXR

Weakness CWE-122

Published February 1, 2024

Last update November 4, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.

Key dates

02Disclosure timeline

February 1, 2024 CVE published

November 4, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-5841 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2026-34118 Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS CVE-2024-29982 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2022-2571 Heap-based Buffer Overflow in vim/vim CVE-2026-48065 pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets CVE-2020-27249