Product by AcademySoftwareFoundation
AcademySoftwareFoundation OpenImageIO
23 known vulnerabilities in AcademySoftwareFoundation OpenImageIO (AcademySoftwareFoundation), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-63638 | OpenImageIO: Cineon invalid bit depth heap out-of-bounds write | 8.3 | |
| High | CVE-2026-43909 | AcademySoftwareFoundation OpenImageIO: Out-of-bounds Read | 8.8 | |
| High | CVE-2026-43908 | AcademySoftwareFoundation OpenImageIO: Integer Overflow or Wraparound | 8.8 | |
| High | CVE-2026-67549 | OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write | 7.6 | |
| High | CVE-2026-43907 | AcademySoftwareFoundation OpenImageIO: Integer Overflow or Wraparound | 8.3 | |
| High | CVE-2026-63419 | OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer | 7.8 | |
| Medium | CVE-2026-59156 | OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow | 6.5 | |
| High | CVE-2026-63422 | OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write | 7.8 | |
| Medium | CVE-2026-113681 | AcademySoftwareFoundation OpenImageIO: Integer Overflow or Wraparound | 5.5 | |
| Medium | CVE-2026-65970 | OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` | 5.3 | |
| High | CVE-2026-43906 | OpenImageIO: HEIF Heap overflow | 7.8 | |
| High | CVE-2026-43904 | OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width | 7.8 | |
| High | CVE-2026-43903 | AcademySoftwareFoundation OpenImageIO: Out-of-bounds Write | 7.8 | |
| Medium | CVE-2026-59181 | OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements | 6.1 | |
| Medium | CVE-2026-59956 | OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set | 6.1 | |
| High | CVE-2026-43905 | OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation | 7.8 | |
| Medium | CVE-2026-63420 | OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` | 5.5 | |
| Medium | CVE-2026-65969 | OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV | 5.5 | |
| Medium | CVE-2026-50291 | OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) | 5.5 | |
| Medium | CVE-2026-63635 | OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS | 5.5 | |
| Medium | CVE-2026-43996 | AcademySoftwareFoundation OpenImageIO: Out-of-bounds Read | 5.5 | |
| Medium | CVE-2026-7582 | AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write | 5.3 | |
| Medium | CVE-2024-40630 | HEIF Heap OOB Read in OpenImageIO | 4.3 |