Skip to content

v3.4.13-rc3

v3.4.13-rc3 - June 19, 2026
@cary-ilm cary-ilm tagged this 18 Jun 02:32 
Patch release that addresses several bugs and security
vulnerabilities.

* 🐛 Fix a regression introduced in v3.4.11 in decoding of DWAA compression
* 🐛 Fix to handling deep images and very large images with the OpenEXRUtil library
* 🐛 Fix initiliazation issue in B44A decoding
* 🐛 Validate HTJ2K chunk header length before decode
* 🛠️ Fix when building statically and using the vendored OpenJPH library

For the python module:

* 🐍 ✨ Support NumPy scalar values Box2i and V2f tuple bindings

This release addresses the following security vulnerabilities:

* [CVE-2026-55373](https://www.cve.org/CVERecord?id=CVE-2026-55373)
  OpenEXRUtil `SampleCountChannel` `endEdit()` can loop forever on `UINT_MAX` sample counts
* [CVE-2026-55371](https://www.cve.org/CVERecord?id=CVE-2026-55371)
  OpenEXRCore `exr_attr_set_bytes()` accepts NULL `type_hint` with positive `hint_length`
* [CVE-2026-55059](https://www.cve.org/CVERecord?id=CVE-2026-55059)
  OpenEXRUtil `SampleCountChannel` row setter heap out-of-bounds write
* [CVE-2026-54920](https://www.cve.org/CVERecord?id=CVE-2026-54920)
  Integer Overflow and Use of Uninitialized Pointer leading to Invalid Delete in OpenEXRUtil Image Resize
* [CVE-2026-53532](https://www.cve.org/CVERecord?id=CVE-2026-53532)
  Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)

This release addresses the following security vulnerabilities:

* [CVE-2026-55373](https://www.cve.org/CVERecord?id=CVE-2026-55373)
  OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
* [CVE-2026-55371](https://www.cve.org/CVERecord?id=CVE-2026-55371)
  OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length
* [CVE-2026-55059](https://www.cve.org/CVERecord?id=CVE-2026-55059)
  OpenEXRUtil SampleCountChannel row setter heap out-of-bounds write
* [CVE-2026-54920](https://www.cve.org/CVERecord?id=CVE-2026-54920)
  Integer Overflow and Use of Uninitialized Pointer leading to Invalid Delete in OpenEXRUtil Image Resize
Assets 2
Loading