Advisories · Technology
AcademySoftwareFoundation OpenImageIO.
Every CVE that names AcademySoftwareFoundation OpenImageIO among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 5.5 Medium
OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 7.6 High
OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.3 High
OpenImageIO: Cineon invalid bit depth heap out-of-bounds write
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 7.8 High
OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 5.3 Medium
OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 5.5 Medium
OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CWE-129
- CVSS 7.8 High
OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 5.5 Medium
OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CWE-129
- CVSS 6.1 Medium
OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 6.5 Medium
OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow
- AcademySoftwareFoundation OpenImageIO
- Denial of service
- CVSS 6.1 Medium
OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 5.5 Medium
OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.4 High
OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.4 High
OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 7.1 High
OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 5.5 Medium
OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.3 High
OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.8 High
OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.8 High
OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 8.5 High
OpenImageIO: HEIF Heap overflow
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 4.8 Medium
AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write
- AcademySoftwareFoundation OpenImageIO
- Memory corruption
- CVSS 4.3 Medium
HEIF Heap OOB Read in OpenImageIO
- AcademySoftwareFoundation OpenImageIO
- Memory corruption