CVE-2026-111166

A flaw was found in libmikmod. An attacker could exploit this vulnerability by providing a specially crafted IMF module file to an application utilizing the library. When the file is parsed by the IMFLoad loader function, an out-of-bounds read occurs in heap memory, causing the application to cra...

DEBIAN-CVE-2026-111166

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

CVE-2026-111166

The libmikmod library, versions through 3.3.15 , is vulnerable to a heap out-of-bounds read in the IMF_Load() loader. An attacker can trigger this by providing a crafted IMF module that enables the linear-period header flag while mapping notes to out-of-range samples. This causes the noteindex to...

CVE-2026-111166 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex...

PT-2026-115172

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.16 Description A heap out-of-bounds read exists in the IMF Load loader. An attacker can trigger this by providing a specially crafted IMF module with the linear-period header flag enabled and notes mapped to...

OpenEXR Image Read Pixels Heap Buffer Overflow DoS

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

OpenEXR Image Read Pixels Heap Buffer Overflow DoS

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

CLSA-2026-1788167338 Fix CVE(s): CVE-2021-20298, CVE-2021-20299, CVE-2021-20304

SECURITY UPDATE: Memory exhaustion in the B44 compressor - debian/patches/CVE-2021-20298.patch: size tmpBuffer in elements rather than bytes in IlmImf/ImfB44Compressor.cpp. - CVE-2021-20298 SECURITY UPDATE: Null dereference on multipart files with no parts - debian/patches/CVE-2021-20299.patch:...

CVE-2026-61555

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::GetChannelsInMultiPartFile processes a...

CVE-2026-61555: Out-of-bounds Read

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::GetChannelsInMultiPartFile processes a...

CLSA-2026-1784118526 openexr: Fix of 2 CVEs

CVE-2021-3933: integer overflow in Imf::bytesPerDeepLineTable ImfMisc.cpp - CVE-2021-45942: heap OOB write in CompositeDeepScanLine::setFrameBuffer via missing subsampling validation...

PT-2026-41981

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=507413960 Crash type: Heap-buffer-overflow READ 2 Crash state: generic unpack exr decoding run Imf 4 0::checkCoreFile...

PT-2026-35468

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf 3 1::LineCompositeTask::execute called from IlmThread 3 1::NullThreadPoolProvider::addTask and IlmThread 3 1::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...

OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp

Summary A heap-buffer-overflow OOB read occurs in the istreamnonparallelread function in ImfContextInit.cpp when parsing a malformed EXR file through a memory-mapped IStream. A signed integer subtraction produces a negative value that is implicitly converted to sizet, resulting in a massive lengt...

EUVD-2016-10867

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the...

CVE-2016-20059 IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the...

CVE-2026-26981 OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.6 and 3.4.0 through 3.4.4, a heap-buffer-overflow OOB read occurs in the istreamnonparallelread function in...

PT-2025-46097

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456158449 Crash type: Heap-buffer-overflow READ 4 Crash state: generic unpack Imf 3 4::ScanLineInputFile::Data::readPixels Imf 3 4::InputFile::readPixels...

OSV-2025-600 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=436037111 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack Imf34::ScanLineInputFile::Data::readPixels Imf34::InputFile::readPixels...