CVE-2026-43907

creationtimestamp| type| source ---|---|--- 2026-05-17 09:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlzyqsnspt2l 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...

CVE-2026-43907 OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed integer overflow in QueryRGBBufferSizeInternal in DPXColorConverter.cpp leads to a heap-based out-of-bounds write when...