AcademySoftwareFoundation OpenImageIO

• CVE-2026-113681 Medium 5.5 OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read 0.2%
• CVE-2026-65969 Medium 5.5 OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV 0.2%
• CVE-2026-67549 High 7.6 OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write 0.3%
• CVE-2026-63638 High 8.3 OpenImageIO: Cineon invalid bit depth heap out-of-bounds write 0.5%
• CVE-2026-63419 High 7.8 OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer 0.2%
• CVE-2026-65970 Medium 5.3 OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` 0.4%
• CVE-2026-63635 Medium 5.5 OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS 0.2%
• CVE-2026-63422 High 7.8 OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write 0.2%
• CVE-2026-63420 Medium 5.5 OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` 0.2%
• CVE-2026-59181 Medium 6.1 OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements 0.2%
• CVE-2026-59156 Medium 6.5 OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow 0.4%
• CVE-2026-59956 Medium 6.1 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set 0.2%
• CVE-2026-50291 Medium 5.5 OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) 0.2%
• CVE-2026-43903 High 8.4 OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds 0.1%
• CVE-2026-43904 High 8.4 OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width 0.2%
• CVE-2026-43905 High 7.1 OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation 0.2%
• CVE-2026-43996 Medium 5.5 OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder 0.2%
• CVE-2026-43907 High 8.3 OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) 0.4%
• CVE-2026-43908 High 8.8 OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder 0.4%
• CVE-2026-43909 High 8.8 OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder 0.4%
• CVE-2026-43906 High 8.5 OpenImageIO: HEIF Heap overflow 0.2%
• CVE-2026-7582 Medium 5.3 AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write 0.1%
• CVE-2024-40630 Medium 4.3 HEIF Heap OOB Read in OpenImageIO 0.4%