Versions mentioned in the description apply to the upstream
Remediation section below for
Debian:10 relevant versions.
makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact.
openexr to version 2.2.1-4.1+deb10u1 or higher.