From d77e46eb6ad0b803325ebf83b08f0d9dd25c4309 Mon Sep 17 00:00:00 2001 From: steaphenai Date: Wed, 17 Dec 2025 19:18:44 +0530 Subject: [PATCH] docs(env_reference): clarify OpenEXR optional support and security rationale --- .../introduction/env_reference/env_reference.markdown | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/doc/tutorials/introduction/env_reference/env_reference.markdown b/doc/tutorials/introduction/env_reference/env_reference.markdown index c370ab8d6e..e6abc90f58 100644 --- a/doc/tutorials/introduction/env_reference/env_reference.markdown +++ b/doc/tutorials/introduction/env_reference/env_reference.markdown @@ -352,3 +352,7 @@ Some external dependencies can be detached into a dynamic library, which will be | OPENCV_IO_MAX_IMAGE_PIXELS | num | 1 << 30 | | | OPENCV_IO_ENABLE_OPENEXR | bool | true (set build option OPENCV_IO_FORCE_OPENEXR or use external OpenEXR), false (otherwise) | enable OpenEXR backend | | OPENCV_IO_ENABLE_JASPER | bool | true (set build option OPENCV_IO_FORCE_JASPER), false (otherwise) | enable Jasper backend | + +### Note +* OpenEXR support in OpenCV is optional. Source builds may include a bundled 3rdparty OpenEXR 2.3.0, but runtime support must be explicitly enabled via `OPENCV_IO_ENABLE_OPENEXR`. Users can also build OpenCV against a system-installed OpenEXR library. +* Support is disabled by default due to historical security considerations with malformed EXR files in older OpenEXR versions. Upgrading to OpenEXR 3.x is not a drop-in change and requires API and ABI adaptations. \ No newline at end of file