TI-2026-30739 CVE-2026-42450
OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser
Priority HIGH 72
OpenColorIO is a color management framework for visual effects and animation.
AcademySoftwareFoundation
Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
AcademySoftwareFoundation records in CISA KEVNo AcademySoftwareFoundation vulnerabilities are listed in CISA KEV.
Records
27 records
TI-2026-38605 CVE-2026-53532
OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)
Priority HIGH 70
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-48281 CVE-2026-68515
OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union
Priority MEDIUM 64
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-48279 CVE-2026-68513
OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision
Priority MEDIUM 64
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-42768 CVE-2026-59981
OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow
Priority MEDIUM 64
OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.
TI-2026-42338 CVE-2026-59189
OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin
Priority MEDIUM 64
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
Priority MEDIUM 64
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-42336 CVE-2026-59186
OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds
Priority MEDIUM 64
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-46992 CVE-2026-65979
OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)
Priority MEDIUM 63
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
Priority MEDIUM 62
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-39952 CVE-2026-55373
OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
Priority MEDIUM 61
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-39766 CVE-2026-55059
OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability
Priority MEDIUM 60
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-48280 CVE-2026-68514
OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images
Priority MEDIUM 58
OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.
Priority MEDIUM 58
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-42771 CVE-2026-59984
OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32
Priority MEDIUM 58
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-42770 CVE-2026-59983
OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32
Priority MEDIUM 58
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-06665 CVE-2026-7582 · GHSA-8rf3-pw76-xgwv
AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write
Priority MEDIUM 55
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev.
TI-2025-14145 CVE-2025-15506 · GHSA-m86r-wr74-693h
AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds
Priority MEDIUM 55
A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0.
TI-2024-27042 CVE-2024-40630
HEIF Heap OOB Read in OpenImageIO
Priority MEDIUM 53
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for featur…
TI-2026-39689 CVE-2026-54920
OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize
Priority MEDIUM 42
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
Priority LOW 31
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-42335 CVE-2026-59184
OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write
Priority LOW 31
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
TI-2026-39951 CVE-2026-55371
OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length
Priority LOW 30
OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry.
TI-2026-76948 CVE-2026-113681 · GHSA-pxpf-24pm-xj4x
Heap out-of-bounds read in OpenImageIO Cineon reader
Priority LOW 29
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing a heap out-of-bounds read.
Priority LOW 24
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.