Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow in the sscanf process when parsing LUT data lines from .spi3d files. An attacker can cause arbitrary code execution or application crash by supplying a specially crafted .spi3d file containing excessively long input line...

CVE-2026-42450

OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, "FileFormatSpi3D.cpp:163" uses "sscanf" with "%s" into 64-byte stack buffers when parsing LUT data lines. Input comes from "lineBuffer4096", so a crafted .spi3d file can overflow by 4000 bytes on...

EUVD-2014-9698

Malware in sbrugna...

Code injection

drivers/video/msm/mdss/mdssmdppp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm...