Openimageio Openimageio vulnerabilities

• academysoftwarefoundation openimageio OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements CVE-2026-59181 Fix available 6.1 MediumSeptember 18, 2026
• academysoftwarefoundation openimageio OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow CVE-2026-59156 Fix available 6.5 MediumSeptember 18, 2026
• academysoftwarefoundation openimageio OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set CVE-2026-59956 Fix available 6.1 MediumSeptember 18, 2026
• academysoftwarefoundation openimageio OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) CVE-2026-50291 Fix available 5.5 MediumSeptember 17, 2026
• academysoftwarefoundation openimageio OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write CVE-2026-67549 7.6 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` CVE-2026-65970 5.3 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV CVE-2026-65969 Fix available 5.5 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: Cineon invalid bit depth heap out-of-bounds write CVE-2026-63638 Fix available 8.3 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS CVE-2026-63635 Fix available 5.5 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write CVE-2026-63422 Fix available 7.8 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` CVE-2026-63420 Fix available 5.5 MediumAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer CVE-2026-63419 Fix available 7.8 HighAugust 4, 2026
• academysoftwarefoundation openimageio OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds CVE-2026-43903 Fix available 8.4 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width CVE-2026-43904 Fix available 8.4 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation CVE-2026-43905 Fix available 7.1 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder CVE-2026-43996 Fix available 5.5 MediumMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) CVE-2026-43907 Fix available 8.3 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder CVE-2026-43908 Fix available 8.8 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder CVE-2026-43909 Fix available 8.8 HighMay 14, 2026
• academysoftwarefoundation openimageio OpenImageIO: HEIF Heap overflow CVE-2026-43906 Fix available 8.5 HighMay 14, 2026
• openimageio OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO... CVE-2024-55194 Fix available 9.8 CriticalJanuary 23, 2025
• openimageio OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component ... CVE-2024-55193 9.8 CriticalJanuary 23, 2025
• openimageio OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component... CVE-2024-55192 Fix available 9.8 CriticalJanuary 23, 2025
• academysoftwarefoundation openimageio HEIF Heap OOB Read in OpenImageIO CVE-2024-40630 Fix available 4.3 MediumJuly 15, 2024
• openimageio, fedora extra packages for enterprise linux, fedora +2 more Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp CVE-2023-3430 Fix available 7.5 HighDecember 18, 2023
• openimageio Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute... CVE-2023-42299 Fix available 9.8 CriticalNovember 2, 2023
• openimageio An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and... CVE-2023-42295 Fix available 8.8 HighOctober 23, 2023
• openimageio Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute... CVE-2023-36183 Fix available 7.8 HighJuly 3, 2023
• academysoftwarefoundation openimageio An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of... CVE-2023-24473 Fix available 5.3 MediumMarch 30, 2023
• academysoftwarefoundation openimageio A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO... CVE-2023-24472 Fix available 7.5 HighMarch 30, 2023
• academysoftwarefoundation openimageio An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of... CVE-2023-22845 Fix available 7.5 HighMarch 30, 2023
• academysoftwarefoundation openimageio, debian linux +1 more A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO... CVE-2022-43603 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43602 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43601 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43600 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... CVE-2022-43599 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality... CVE-2022-43598 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality... CVE-2022-43597 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An information disclosure vulnerability exists in the IFFOutput channel interleaving... CVE-2022-43596 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple denial of service vulnerabilities exist in the image output closing functionality of... CVE-2022-43595 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more Multiple denial of service vulnerabilities exist in the image output closing functionality of... CVE-2022-43594 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO... CVE-2022-43593 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An information disclosure vulnerability exists in the DPXOutput::close() functionality of... CVE-2022-43592 Fix available 5.9 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A denial of service vulnerability exists in the DDS native tile reading functionality of... CVE-2022-41999 Fix available 7.5 HighDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim()... CVE-2022-41988 Fix available 5.3 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO... CVE-2022-41981 Fix available 8.1 HighDecember 22, 2022
• academysoftwarefoundation openimageio An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes... CVE-2022-41977 Fix available 5.3 MediumDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO... CVE-2022-41838 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec... CVE-2022-41837 Fix available 9.8 CriticalDecember 22, 2022
• academysoftwarefoundation openimageio, debian linux +1 more A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of... CVE-2022-41794 Fix available 9.8 CriticalDecember 22, 2022
• Show olderLoading…