Skip to contentAcademysoftwarefoundation vulnerabilities
Newest
- academysoftwarefoundation openexrOpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)CVE-2026-40250Fix available8.4 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)CVE-2026-40244Fix available8.4 High
- academysoftwarefoundation openexrOpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()CVE-2026-39886Fix available5.3 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: DWA Lossy Decoder Heap Out-of-Bounds WriteCVE-2026-34589Fix available8.4 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +9 more +11 moreOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteCVE-2026-34588Fix available8.6 High
- academysoftwarefoundation openexrOpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompressionCVE-2026-34380Fix available5.9 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)CVE-2026-34379Fix available7.1 High
- academysoftwarefoundation openexrOpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.xCVE-2026-34378Fix available6.5 Medium
- academysoftwarefoundation openexrOpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)CVE-2026-34543Fix available8.7 High
- academysoftwarefoundation openexrOpenEXR: integer overflow to OOB write in uncompress_b44_impl()CVE-2026-34544Fix available8.4 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: integer overflow lead to OOB in HTJ2K decoderCVE-2026-34545Fix available8.4 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 moreOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeCVE-2026-27622Fix available8.4 High
- academysoftwarefoundation openexrOpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cppCVE-2026-26981Fix available6.5 Medium
- academysoftwarefoundation opencolorioAcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-boundsCVE-2025-15506Fix available4.8 Medium
- academy software foundation openexrAcademy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2025-12840Fix available7.8 High
- academy software foundation openexrAcademy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2025-12839Fix available7.8 High
- academy software foundation openexrAcademy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2025-12495Fix available7.8 High
- academysoftwarefoundation openexrOpenEXR has use after free in PyObject_StealAttrStringCVE-2025-64183Fix available5.5 Medium
- academysoftwarefoundation openexrOpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()CVE-2025-64182Fix available5.5 Medium
- academysoftwarefoundation openexrOpenEXR Makes Use of Uninitialized MemoryCVE-2025-64181Fix available2.0 Low
- academysoftwarefoundation materialxMaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack ExhaustionCVE-2025-53012Fix available5.5 Medium
- academysoftwarefoundation materialxMaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion LimitCVE-2025-53009Fix available5.5 Medium
- academysoftwarefoundation openexrOpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory ErrorsCVE-2025-48074Fix available4.6 Medium
- academysoftwarefoundation openexrOpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" ModeCVE-2025-48073Fix available4.6 Medium
- academysoftwarefoundation openexrOpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds HeapCVE-2025-48072Fix available6.8 Medium
- academysoftwarefoundation openexrOpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline ParsingCVE-2025-48071Fix available8.4 High
- academysoftwarefoundation materialxMaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutputCVE-2025-53011Fix available2.0 Low
- academysoftwarefoundation materialxMaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer DereferenceCVE-2025-53010Fix available2.0 Low
- academysoftwarefoundation openimageioHEIF Heap OOB Read in OpenImageIOCVE-2024-40630Fix available4.3 Medium
- academy software foundation openexrOpenEXR Heap Overflow in Scanline Deep Data ParsingCVE-2023-5841Fix available9.1 Critical
- academysoftwarefoundation openimageioAn information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of...CVE-2023-24473Fix available5.3 Medium
- academysoftwarefoundation openimageioA denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO...CVE-2023-24472Fix available7.5 High
- academysoftwarefoundation openimageioAn out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of...CVE-2023-22845Fix available7.5 High
- academysoftwarefoundation openimageio, debian linux +1 moreA denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO...CVE-2022-43603Fix available5.9 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...CVE-2022-43602Fix available8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...CVE-2022-43601Fix available8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...CVE-2022-43600Fix available8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...CVE-2022-43599Fix available8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality...CVE-2022-43598Fix available8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality...CVE-2022-43597Fix available8.1 High
- academysoftwarefoundation openimageio, debian linux +1 moreAn information disclosure vulnerability exists in the IFFOutput channel interleaving...CVE-2022-43596Fix available5.9 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple denial of service vulnerabilities exist in the image output closing functionality of...CVE-2022-43595Fix available5.9 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreMultiple denial of service vulnerabilities exist in the image output closing functionality of...CVE-2022-43594Fix available5.9 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreA denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO...CVE-2022-43593Fix available5.9 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreAn information disclosure vulnerability exists in the DPXOutput::close() functionality of...CVE-2022-43592Fix available5.9 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreA denial of service vulnerability exists in the DDS native tile reading functionality of...CVE-2022-41999Fix available7.5 High
- academysoftwarefoundation openimageio, debian linux +1 moreAn information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim()...CVE-2022-41988Fix available5.3 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreA stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO...CVE-2022-41981Fix available8.1 High
- academysoftwarefoundation openimageioAn out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes...CVE-2022-41977Fix available5.3 Medium
- academysoftwarefoundation openimageio, debian linux +1 moreA code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO...CVE-2022-41838Fix available9.8 Critical
- Show moreLoading…