CVE-2026-63420

A flaw was found in OpenImageIO. When processing an indexed Photoshop Document PSD image containing transparency metadata with oiio:rawcolor or psd:rawdata enabled, the interleaverow function attempts to read data beyond the bounds of allocated memory. This heap out-of-bounds read can lead to a...

CVE-2026-63635: Out-of-bounds Read

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted psd with an invalid colormode bypasses normal validation when oiio:rawcolor or psd:rawdata is enabled...