AcademySoftwareFoundation OpenImageIO vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202622

Newest CVEs

• CVE-2026-113681

  OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read

  AcademySoftwareFoundation · OpenImageIO

  Medium6.8
• CVE-2026-65969

  OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV

  AcademySoftwareFoundation · OpenImageIO

  Medium5.5
• CVE-2026-67549

  OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write

  AcademySoftwareFoundation · OpenImageIO

  High7.6
• CVE-2026-63638

  OpenImageIO: Cineon invalid bit depth heap out-of-bounds write

  AcademySoftwareFoundation · OpenImageIO

  High8.3
• CVE-2026-63419

  OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer

  AcademySoftwareFoundation · OpenImageIO

  High7.8
• CVE-2026-65970

  OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`

  AcademySoftwareFoundation · OpenImageIO

  Medium5.3
• CVE-2026-63635

  OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS

  AcademySoftwareFoundation · OpenImageIO

  Medium5.5
• CVE-2026-63422

  OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write

  AcademySoftwareFoundation · OpenImageIO

  High7.8
• CVE-2026-63420

  OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`

  AcademySoftwareFoundation · OpenImageIO

  Medium5.5
• CVE-2026-59181

  OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements

  AcademySoftwareFoundation · OpenImageIO

  Medium6.1