Academysoftwarefoundation Openimageio vulnerabilities

• academysoftwarefoundation openimageio OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read CVE-2026-113681 6.8 MediumOctober 20, 2026
• academysoftwarefoundation openimageio OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements CVE-2026-59181 Fix available 6.1 MediumSeptember 18, 2026
• academysoftwarefoundation openimageio OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow CVE-2026-59156 Fix available 6.5 MediumSeptember 18, 2026
• academysoftwarefoundation openimageio OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set CVE-2026-59956 Fix available 6.1 MediumSeptember 18, 2026
• academysoftwarefoundation openimageio OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) CVE-2026-50291 Fix available 5.5 MediumSeptember 17, 2026
• academysoftwarefoundation openimageio OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write CVE-2026-67549 7.6 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` CVE-2026-65970 5.3 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV CVE-2026-65969 Fix available 5.5 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: Cineon invalid bit depth heap out-of-bounds write CVE-2026-63638 Fix available 8.3 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS CVE-2026-63635 Fix available 5.5 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write CVE-2026-63422 Fix available 7.8 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` CVE-2026-63420 Fix available 5.5 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer CVE-2026-63419 Fix available 7.8 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds CVE-2026-43903 Fix available 8.4 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width CVE-2026-43904 Fix available 8.4 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation CVE-2026-43905 Fix available 7.1 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder CVE-2026-43996 Fix available 5.5 MediumMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) CVE-2026-43907 Fix available 8.3 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder CVE-2026-43908 Fix available 8.8 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder CVE-2026-43909 Fix available 8.8 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: HEIF Heap overflow CVE-2026-43906 Fix available 8.5 HighMay 14, 2026
• academysoftwarefoundation openimageio AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write CVE-2026-7582 Fix available 4.8 MediumMay 1, 2026
• academysoftwarefoundation openimageio HEIF Heap OOB Read in OpenImageIO CVE-2024-40630 Fix available 4.3 MediumJuly 15, 2024
• academysoftwarefoundation openimageio An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of... CVE-2023-24473 Fix available 5.3 MediumMarch 30, 2023
• academysoftwarefoundation openimageio A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO... CVE-2023-24472 Fix available 7.5 HighMarch 30, 2023
• academysoftwarefoundation openimageio An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of... CVE-2023-22845 Fix available 7.5 HighMarch 30, 2023
• academysoftwarefoundation openimageio, debian linux +1 more A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO... CVE-2022-43603 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43602 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43601 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43600 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43599 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality... CVE-2022-43598 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality... CVE-2022-43597 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An information disclosure vulnerability exists in the IFFOutput channel interleaving... CVE-2022-43596 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple denial of service vulnerabilities exist in the image output closing functionality of... CVE-2022-43595 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple denial of service vulnerabilities exist in the image output closing functionality of... CVE-2022-43594 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO... CVE-2022-43593 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An information disclosure vulnerability exists in the DPXOutput::close() functionality of... CVE-2022-43592 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A denial of service vulnerability exists in the DDS native tile reading functionality of... CVE-2022-41999 Fix available 7.5 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim()... CVE-2022-41988 Fix available 5.3 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO... CVE-2022-41981 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes... CVE-2022-41977 Fix available 5.3 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO... CVE-2022-41838 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec... CVE-2022-41837 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of... CVE-2022-41794 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when... CVE-2022-41684 Fix available 7.5 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF... CVE-2022-41649 Fix available 7.5 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in... CVE-2022-41639 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE... CVE-2022-38143 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master... CVE-2022-36354 Fix available 5.3 MediumDecember 22, 2022