Vulnerabilities

TI-2026-74914 CVE-2026-111130 · GHSA-5jq9-3x2q-j76q

Out-of-bounds read in OpenSlide MIRAX reader crashes apps

MEDIUM 64

OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00198 Published 2026-10-15 No fix listed CWE-125

TI-2026-39437 CVE-2026-54604

OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1

LOW 25

OpenSlide is a C library for reading whole slide image files.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00527 Published 2026-09-17 Fixed in 4.0.1 CWE-758

TI-2026-36233 CVE-2026-48977

OpenSlide: Arbitrary memory write with crafted Ventana BIF file

LOW 36

OpenSlide is a C library for reading whole slide image files.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00476 Published 2026-09-17 Fixed in 4.0.1 CWE-123

Vulnerabilities

Filters

Out-of-bounds read in OpenSlide MIRAX reader crashes apps

OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1

OpenSlide: Arbitrary memory write with crafted Ventana BIF file