CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

RedhatCVE•added 2026/05/15 2:3 p.m.•3 views

CVE-2026-43996

A flaw was found in OpenImageIO. An integer overflow vulnerability exists in the TGAInput::decodepixel function's bounds check. This flaw allows a local attacker, by enticing a user to process a specially crafted image file, to cause an out-of-bounds read, leading to a segmentation fault and a...

5.5CVSS5.8AI score0.00013EPSS

Exploits1References2

AlpineLinux•added 2026/05/14 7:8 p.m.•6 views

CVE-2026-43996

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, the bounds check in TGAInput::decodepixel computes k + palbytespp as unsigned 32-bit arithmetic. When k = 0xFFFFFFFC and palbytespp = 4...

5.5CVSS5.9AI score0.00013EPSS

Exploits1References1

CVE•added 2026/05/14 7:8 p.m.•8 views

CVE-2026-43996

OpenImageIO: The vulnerability is in TGAInput::decode_pixel where a bounds check uses unsigned 32-bit arithmetic. When k = 0xFFFFFFFC and palbytespp = 4, k + palbytespp wraps, causing an out-of-bounds palette access that can trigger a SEGV. This affects releases prior to 3.0.18.0 and 3.1.13.0. Th...

5.5CVSS5.9AI score0.00013EPSS

Exploits1References1Affected Software1

NVD•added 2023/03/30 4:15 p.m.•17 views

CVE-2023-22845

An out-of-bounds read vulnerability exists in the TGAInput::decodepixel functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

7.5CVSS7.1AI score0.00235EPSS

Exploits1References2