CVE-2024-31047 Integer overflow in n/a
A local attacker can cause a denial of service in the OpenEXR library via an integer overflow in the convert function.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-31047?
CVE-2024-31047 is a low-severity vulnerability in Openexr Openexr, published on 8 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.
Weakness: CWE-190
Which versions are affected by CVE-2024-31047?
It affects 1 product.
Products include Openexr Openexr.
How do I fix CVE-2024-31047?
Upgrade to a fixed version.
Is CVE-2024-31047 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-31047 exists.
Other vulnerabilities in Openexr Openexr
- CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing
- CVE-2026-41142 OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API
- CVE-2026-42216 OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion
- CVE-2017-9111 OpenEXR invalid write
- CVE-2017-9113 Memory corruption in n/a
Sources
Also known as CLSA-2025-1759413150, CLSA-2026-1788193914, DEBIAN-CVE-2024-31047, GHSA-prq6-rh2c-gq39, JLSEC-2026-134, OESA-2024-1549 and 5 more.