CVE-2026-67549

OpenImageIO is a toolset for reading, writing, and manipulating image files used in VFX/animation. Prior to 3.1.16.0 , a crafted 1-bit contiguous CMYK TIFF triggers a heap out-of-bounds write in tiffinput::bit_convert() (src/tiff.imageio/tiffinput.cpp). The bug occurs because a native uint1 Image...