Skip to content
Academysoftwarefoundation vulnerabilities
Newest
-
academysoftwarefoundation openimageio
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read
CVE-2026-113681
6.8 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements
CVE-2026-59181
Fix available
6.1 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow
CVE-2026-59156
Fix available
6.5 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
CVE-2026-59956
Fix available
6.1 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)
CVE-2026-50291
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow
CVE-2026-59981
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images
CVE-2026-68514
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union
CVE-2026-68515
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision
CVE-2026-68513
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)
CVE-2026-65979
Fix available
6.7 Medium
-
academysoftwarefoundation openexr
OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure
CVE-2026-62986
Fix available
4.3 Medium
-
academysoftwarefoundation openexr
OpenEXR: Empty multiView viewFromChannelName file crash
CVE-2026-61555
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32
CVE-2026-59985
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32
CVE-2026-59984
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32
CVE-2026-59983
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms
CVE-2026-59982
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin
CVE-2026-59189
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: exrmetrics deep pixelmode heap buffer overflow
CVE-2026-59187
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds
CVE-2026-59186
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write
CVE-2026-59184
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding
CVE-2026-59183
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow
CVE-2026-68516
Fix available
6.5 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write
CVE-2026-67549
7.6 High
-
academysoftwarefoundation openimageio
OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`
CVE-2026-65970
5.3 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV
CVE-2026-65969
Fix available
5.5 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: Cineon invalid bit depth heap out-of-bounds write
CVE-2026-63638
Fix available
8.3 High
-
academysoftwarefoundation openimageio
OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS
CVE-2026-63635
Fix available
5.5 Medium
-
academysoftwarefoundation openimageio
OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write
CVE-2026-63422
Fix available
7.8 High
-
academysoftwarefoundation openimageio
OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`
CVE-2026-63420
Fix available
5.5 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer
CVE-2026-63419
Fix available
7.8 High
-
academysoftwarefoundation openexr
OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
CVE-2026-55373
Fix available
6.2 Medium
-
academysoftwarefoundation openexr
OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length
CVE-2026-55371
Fix available
6.9 Medium
-
academysoftwarefoundation openexr
OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability
CVE-2026-55059
Fix available
6.1 Medium
-
academysoftwarefoundation openexr
OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize
CVE-2026-54920
Fix available
0.0 None
-
academysoftwarefoundation openexr
OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)
CVE-2026-53532
Fix available
7.1 High
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more
OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)
CVE-2026-45696
Fix available
8.3 High
-
academysoftwarefoundation openexr
OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow
CVE-2026-44663
Fix available
6.1 Medium
-
academysoftwarefoundation opencolorio
OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser
CVE-2026-42450
Fix available
8.4 High
-
academysoftwarefoundation openimageio
OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds
CVE-2026-43903
Fix available
8.4 High
-
academysoftwarefoundation openimageio
OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width
CVE-2026-43904
Fix available
8.4 High
-
academysoftwarefoundation openimageio
OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation
CVE-2026-43905
Fix available
7.1 High
-
academysoftwarefoundation openimageio
OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder
CVE-2026-43996
Fix available
5.5 Medium
-
academysoftwarefoundation openimageio
OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)
CVE-2026-43907
Fix available
8.3 High
-
academysoftwarefoundation openimageio
OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder
CVE-2026-43908
Fix available
8.8 High
-
academysoftwarefoundation openimageio
OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder
CVE-2026-43909
Fix available
8.8 High
-
academysoftwarefoundation openimageio
OpenImageIO: HEIF Heap overflow
CVE-2026-43906
Fix available
8.5 High
-
academysoftwarefoundation openexr
OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)
CVE-2026-42217
Fix available
6.3 Medium
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 more
OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion
CVE-2026-42216
Fix available
8.8 High
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 more
OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API
CVE-2026-41142
Fix available
8.8 High
-
academysoftwarefoundation openimageio
AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write
CVE-2026-7582
Fix available
4.8 Medium
- Show olderLoading…