Back Linuxsecurity

Fedora 42 mingw-openexr Significant Buffer Overflow DoS CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 17, 2026

Share: View original

MinGW Windows openexr library. Update Information : Update to openexr-3.4.6 resp 3.3.8.

MinGW Windows openexr library.

Update to openexr-3.4.6 resp 3.3.8.

* Sun Mar 8 2026 Sandro Mani - 3.3.8-1 - Update to 3.3.8

[ 1 ] Bug #2442257 - CVE-2026-26981 mingw-openexr: OpenEXR: Denial of Service via heap-buffer-overflow when parsing a malformed EXR file [fedora-all] [ 2 ] Bug #2444289 - CVE-2026-27622 mingw-openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-45845d11c3' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Denial of Service Vulnerabilities in Fedora's MinGW OpenEXR Library Fedora has released updates for the MinGW Windows OpenEXR library due to significant vulnerabilities. Two critical CVEs have been identified: CVE-2026-26981, published on 2026-02-24, which allows for denial of service via a heap-buffer overflow when parsing malformed EXR files, and CVE-2026-27622, published on 2026-03-03, which enables arbitrary code execution through integer overflow in EXR file processing. The updates are available for versions 3.3.8 and 3.4.6. Users are advised to upgrade their systems using the 'dnf' update program to mitigate these risks. The vulnerabilities affect all Fedora systems utilizing the MinGW OpenEXR library. The potential impact includes service disruptions and unauthorized code execution. Current status indicates that patches are available, but users must act promptly to secure their systems. 2 sources 71

Extracted Entities

Attack Types (1)

Denial of Service

CVEs (2)

CVE-2026-26981 CVE-2026-27622