openexr (SUSE:Linux Enterprise Server 16.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 16.0 package openexr, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2025-12495 — CVSS 7.8 (high): Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability…
• CVE-2025-12839 — CVSS 7.8 (high): Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability…
• CVE-2025-12840 — CVSS 7.8 (high): Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability…
• CVE-2026-27622 — CVSS 7.8 (high): OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture…
• CVE-2025-64181 — CVSS 7.5 (high): OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture…