AAcademySoftwareFoundation

Products

Exploited and recent CVEs

• CVE-2026-113681 Medium 5.5 OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read 0.2%
• CVE-2026-65969 Medium 5.5 OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV 0.2%
• CVE-2026-67549 High 7.6 OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write 0.3%
• CVE-2026-63638 High 8.3 OpenImageIO: Cineon invalid bit depth heap out-of-bounds write 0.5%
• CVE-2026-63419 High 7.8 OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer 0.2%
• CVE-2026-65970 Medium 5.3 OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` 0.4%
• CVE-2026-63635 Medium 5.5 OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS 0.2%
• CVE-2026-63422 High 7.8 OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write 0.2%
• CVE-2026-63420 Medium 5.5 OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` 0.2%
• CVE-2026-59181 Medium 6.1 OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements 0.2%
• CVE-2026-59156 Medium 6.5 OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow 0.4%
• CVE-2026-59956 Medium 6.1 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set 0.2%
• CVE-2026-50291 Medium 5.5 OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) 0.2%
• CVE-2026-59981 High 7.1 OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow 0.3%
• CVE-2026-68514 Medium 5.5 OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images 0.2%
• CVE-2026-68515 High 7.1 OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union 0.2%
• CVE-2026-68513 High 7.1 OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision 0.2%
• CVE-2026-65979 Medium 6.7 OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN) 0.2%
• CVE-2026-62986 Medium 4.3 OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure 0.4%
• CVE-2026-61555 Medium 5.5 OpenEXR: Empty multiView viewFromChannelName file crash 0.2%
• CVE-2026-59985 Medium 5.5 OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32 0.2%
• CVE-2026-59984 Medium 5.5 OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32 0.2%
• CVE-2026-59983 Medium 5.5 OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32 0.2%
• CVE-2026-59982 High 7.1 OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms 0.3%
• CVE-2026-59189 High 7.1 OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin 0.3%
• CVE-2026-59187 High 7.1 OpenEXR: exrmetrics deep pixelmode heap buffer overflow 0.4%
• CVE-2026-59186 High 7.1 OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds 0.3%
• CVE-2026-59184 High 7.1 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write 0.2%
• CVE-2026-59183 Medium 5.5 OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding 0.2%
• CVE-2026-55373 Medium 6.2 OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts 0.2%