Read the docs

Academy Software Foundation

Records78All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

Academy Software Foundation records in CISA KEV

No Academy Software Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

78 records in Openexr · all components

Priority HIGH 80

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-bas…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01248 Published 2024-02-01 Partial fix · 3.2.2, 3.1.12 CWE-122
Priority HIGH 72

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00635 Published 2026-04-01 Partial fix · 3.4.7 CWE-122
Priority HIGH 72

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00254 Published 2026-04-01 Partial fix · 3.4.8 CWE-190
Priority MEDIUM 63

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00302 Published 2026-04-21 Partial fix · 3.4.10 CWE-190
Priority MEDIUM 60

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00265 Published 2026-04-06 Partial fix · 3.2.7, 3.3.9 +1 CWE-190
Priority MEDIUM 58

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00322 Published 2025-11-10 Fixed in 3.2.5, 3.3.6 +1 CWE-416
TI-2025-39624 CVE-2025-64181 · GHSA-3h9h-qfvw-98hq

OpenEXR Makes Use of Uninitialized Memory

Priority MEDIUM 44

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 4.0LOW 2.0 Local No auth No interaction EPSS 0.00409 Published 2025-11-10 Partial fix · 3.3.6, 3.4.3 CWE-457
TI-2021-05947 CVE-2021-23169 · GHSA-f3pg-chcp-5ff8

Out-of-bounds write in OpenEXR

Priority MEDIUM 42

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02291 Published 2021-06-08 Will not fix CWE-787
Priority MEDIUM 42

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06437 Published 2009-07-31 No fix listed CWE-189
Load more
Open these records in search →