CVE-2026-63635

OpenImageIO , a toolset for reading and writing image files used in VFX/animation, is affected by an out-of-bounds read in its PSD image input handler (src/psd.imageio/psdinput.cpp). When oiio:rawcolor or psd:rawdata is enabled, a crafted PSD file with an invalid color_mode bypasses validation in...