CVE-2026-59956

A flaw was found in OpenImageIO. When processing an uncompressed 16-bit IFF Image File Format image with a z-buffer, the iffinput::readimg function allocates a temporary scanline buffer that is smaller than required. This leads to an oversized memory copy operation that reads beyond the allocated...