CVE-2026-65970

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP-compressed TIFF image file. When processed with TIFF multithreading enabled, the software can prematurely release memory while background...

CVE-2026-65969

A flaw was found in OpenImageIO. A local attacker could trick a user into processing a specially crafted truncated TGA image. This could lead to a signed overflow in the gifsplitpalette function, corrupting internal data and causing an out-of-bounds read. The result is a process crash and a denia...

CVE-2026-63635

A flaw was found in OpenImageIO. A remote attacker could exploit this by crafting a malicious PSD Photoshop Document file with an invalid color mode. When processed by OpenImageIO with raw color or raw data enabled, this crafted file bypasses validation, leading to an out-of-bounds read and...

CVE-2026-63420

A flaw was found in OpenImageIO. When processing an indexed Photoshop Document PSD image containing transparency metadata with oiio:rawcolor or psd:rawdata enabled, the interleaverow function attempts to read data beyond the bounds of allocated memory. This heap out-of-bounds read can lead to a...

CVE-2026-59956

A flaw was found in OpenImageIO. When processing an uncompressed 16-bit IFF Image File Format image with a z-buffer, the iffinput::readimg function allocates a temporary scanline buffer that is smaller than required. This leads to an oversized memory copy operation that reads beyond the allocated...

CVE-2026-59181

A flaw was found in OpenImageIO. A specially crafted Cineon image file, when processed by OpenImageIO, can cause a stack buffer overflow. This vulnerability allows an attacker to trigger memory corruption, which can lead to a denial of service DoS by making the application unresponsive or crash...

CVE-2026-59156

A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. A remote attacker could exploit this vulnerability by providing a specially crafted Flexible Image Transport System FITS stream. This stream, containing consecutive header blocks without the mandatory...

CVE-2026-50291

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted BMP Bitmap image file. Processing this malicious file can lead to an invalid read operation during image decoding, causing the application to...

CVE-2026-67549

A flaw was found in OpenImageIO. A remote attacker could exploit this vulnerability by tricking a user into processing a specially crafted 1-bit CMYK TIFF image. The tiffinput::bitconvert function incorrectly writes 8-bit output into a smaller buffer allocated for 1-bit data, causing a heap...

CVE-2026-63638

A flaw was found in OpenImageIO. A remote attacker could exploit this vulnerability by providing a specially crafted Cineon image file. This crafted file, when processed, can lead to a heap out-of-bounds write due to an invalid bit depth declaration, resulting in memory corruption. This could...

CVE-2026-63419

A flaw was found in OpenImageIO, a toolset for reading, writing, and manipulating image files. When processing specially crafted IFF Image File Format ZBUFFER tiles, the iffinput::readnativetile function may incorrectly handle pixel data sizes. This can lead to a heap out-of-bounds write, resulti...

CVE-2026-63422

A flaw was found in OpenImageIO. When processing specially crafted tiled OpenEXR images, where the image width is not a multiple of its tile width, a heap out-of-bounds write can occur. This vulnerability arises from incorrect calculation of scanline stride during tile reading, leading to memory...

Linux Distros Unpatched Vulnerability : CVE-2026-65970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-67549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-63638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...

Linux Distros Unpatched Vulnerability : CVE-2026-63420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...

Linux Distros Unpatched Vulnerability : CVE-2026-59156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, a...

Linux Distros Unpatched Vulnerability : CVE-2026-63422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...

Linux Distros Unpatched Vulnerability : CVE-2026-59956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, a...

Linux Distros Unpatched Vulnerability : CVE-2026-50291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and...