The flaw occurs when the OpenEXR library processes an EXR file that contains an empty multiView header. Imf::GetChannelsInMultiPartFile() reads the file, and then Imf::viewFromChannelName() attempts to index the empty vector for a dotless channel name, causing an out‑of‑bounds read (CWE‑125). This leads to a crash of the process that handles the image, manifesting as a denial of service. The issue does not provide code execution but disrupts applications that load or render the vulnerable image.

Academy Software Foundation OpenEXR libraries prior to version 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are affected. These versions are commonly deployed in the motion‑picture and visual‑effects industry for composing and rendering high‑dynamic‑range imagery. The vulnerability is limited to the native C++ implementation of the OpenEXR reference library.

The CVSS score of 5.5 indicates moderate severity. No EPSS data is available and the vulnerability is not listed in the CISA KEV catalog, so the likelihood of widespread exploitation is uncertain. An attacker would need to supply a crafted EXR file that includes an empty multiView header; the crash is triggered when Imf::viewFromChannelName() accesses the vector. Thus the attack vector is likely file‑based, through local or remote file upload or ingestion by an application that trusts the image source. The deterministic crash can be used to interrupt services, but it does not enable direct code execution.