CVE-2026-63422 OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is not a multiple of its tile width can trigger an overflow when a caller reads...

CVE-2026-63422 OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is not a multiple of its tile width can trigger an overflow when a caller reads...

rails-activestorage-vips-audit

rails-activestorage-vips-audit An Agent Skill that audits Ruby on Rails repositories for exposure to CVE-2026-66066 KindaRails2Shell — the Active Storage libvips variant-processing vulnerability that allows arbitrary file read and, in a Rails application, remote code execution. The skill is a...

New Android malware uses AI to steal bank logins and PINs

Researchers at Zimperium's zLabs have analyzed an Android Trojan that uses an automated, multi-stage infection process. What’s new is that RatHat gives a live AI assistant the keys to the accessibility tree of the infected device and uses it to determine where to tap or scroll, rather than...

EUVD-2026-83123

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata creates fewer stored channelbuffers than the spec.nchannels value advertised ...

CVE-2026-63420

OpenImageIO is a toolset for reading, writing, and manipulating image files relevant to VFX/animation. This vulnerability affects the PSD input plugin (src/psd.imageio/psdinput.cpp). An indexed PSD with transparency metadata creates fewer channel_buffers than spec.nchannels advertises; when oiio:...

CVE-2026-63420 OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata creates fewer stored channelbuffers than the spec.nchannels value advertised ...

CVE-2026-63420 OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata creates fewer stored channelbuffers than the spec.nchannels value advertised ...

CVE-2026-51585

realtek poc rt26cx21x64.sys exploit Realtek PCIe GbE/2.5GbE/5GbE family Overview OID 0xFF816871 maps the nic's mmio bar into the calling proc's virtual addr space, MmLockedPagesSpecifyCache, reachable from um via \.\RealTekCardGUID This IOCTL 0x0012C818 is gated by a registry value DrvMode=4 Once...

CVE-2026-59181 OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open...

EUVD-2026-83122

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open...

CVE-2026-59181

OpenImageIO , a toolset for reading and manipulating image files in VFX/animation, is affected by a stack buffer overflow in its Cineon reader. A crafted Cineon file can supply a numberOfElements value exceeding the format maximum of eight; CineonInput::open() uses this unchecked value as a loop ...

CVE-2026-59181 OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open...

CVE-2026-59181 OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file can supply a numberofelements value greater than the format maximum of eight. cineoninput::open...

CVE-2026-59156

OpenImageIO , a toolset for reading and writing image files used in VFX/animation, has an unbounded recursion vulnerability in its FITS header parser . The affected function FitsInput::read_fits_header() (in src/fits.imageio/fitsinput.cpp) calls itself without a depth bound when processing a craf...

CVE-2026-59156 OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecutive 2880-byte header blocks without the mandatory end keyword makes...

CVE-2026-59156 OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecutive 2880-byte header blocks without the mandatory end keyword makes...

EUVD-2026-83121

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecutive 2880-byte header blocks without the mandatory end keyword makes...

EUVD-2026-83120

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...