CVE-2026-63422

OpenImageIO is a C++ toolset for reading and writing image files used in VFX/animation. In its OpenEXR plugin , the function OpenEXRInput::read_native_tiles() (in src/openexr.imageio/exrinput.cpp) copies rows using the padded whole-tile scanline_stride instead of user_scanline_bytes when a caller...

CVE-2026-63422 OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is not a multiple of its tile width can trigger an overflow when a caller reads...