agentprime: academysoftwarefoundation-openimageioEvery new CVE for academysoftwarefoundation-openimageio.https://agentprime.io/CVE-2026-113681: OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Readhttps://agentprime.io/advisories/CVE-2026-113681/https://agentprime.io/advisories/CVE-2026-113681/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:41 GMTCVECVE-2026-65969: OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGVhttps://agentprime.io/advisories/CVE-2026-65969/https://agentprime.io/advisories/CVE-2026-65969/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:51:10 GMTCVECVE-2026-67549: OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-67549/https://agentprime.io/advisories/CVE-2026-67549/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:49:38 GMTCVECVE-2026-63638: OpenImageIO: Cineon invalid bit depth heap out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-63638/https://agentprime.io/advisories/CVE-2026-63638/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:47:53 GMTCVECVE-2026-63419: OpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferhttps://agentprime.io/advisories/CVE-2026-63419/https://agentprime.io/advisories/CVE-2026-63419/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:46:44 GMTCVECVE-2026-65970: OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`https://agentprime.io/advisories/CVE-2026-65970/https://agentprime.io/advisories/CVE-2026-65970/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:41:36 GMTCVECVE-2026-63635: OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoShttps://agentprime.io/advisories/CVE-2026-63635/https://agentprime.io/advisories/CVE-2026-63635/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:39:06 GMTCVECVE-2026-63422: OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-63422/https://agentprime.io/advisories/CVE-2026-63422/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:37:57 GMTCVECVE-2026-63420: OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`https://agentprime.io/advisories/CVE-2026-63420/https://agentprime.io/advisories/CVE-2026-63420/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:36:51 GMTCVECVE-2026-59181: OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElementshttps://agentprime.io/advisories/CVE-2026-59181/https://agentprime.io/advisories/CVE-2026-59181/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:35:32 GMTCVECVE-2026-59156: OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflowhttps://agentprime.io/advisories/CVE-2026-59156/https://agentprime.io/advisories/CVE-2026-59156/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:34:19 GMTCVECVE-2026-59956: OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is sethttps://agentprime.io/advisories/CVE-2026-59956/https://agentprime.io/advisories/CVE-2026-59956/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:33:22 GMTCVECVE-2026-50291: OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)https://agentprime.io/advisories/CVE-2026-50291/https://agentprime.io/advisories/CVE-2026-50291/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:33:44 GMTCVECVE-2026-43903: OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release buildshttps://agentprime.io/advisories/CVE-2026-43903/https://agentprime.io/advisories/CVE-2026-43903/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:10:21 GMTCVECVE-2026-43904: OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image widthhttps://agentprime.io/advisories/CVE-2026-43904/https://agentprime.io/advisories/CVE-2026-43904/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:09:52 GMTCVECVE-2026-43905: OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocationhttps://agentprime.io/advisories/CVE-2026-43905/https://agentprime.io/advisories/CVE-2026-43905/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:09:18 GMTCVECVE-2026-43996: OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoderhttps://agentprime.io/advisories/CVE-2026-43996/https://agentprime.io/advisories/CVE-2026-43996/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:08:26 GMTCVECVE-2026-43907: OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)https://agentprime.io/advisories/CVE-2026-43907/https://agentprime.io/advisories/CVE-2026-43907/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:07:05 GMTCVECVE-2026-43908: OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoderhttps://agentprime.io/advisories/CVE-2026-43908/https://agentprime.io/advisories/CVE-2026-43908/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:01:21 GMTCVECVE-2026-43909: OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoderhttps://agentprime.io/advisories/CVE-2026-43909/https://agentprime.io/advisories/CVE-2026-43909/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 19:00:20 GMTCVECVE-2026-43906: OpenImageIO: HEIF Heap overflowhttps://agentprime.io/advisories/CVE-2026-43906/https://agentprime.io/advisories/CVE-2026-43906/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 18:54:17 GMTCVECVE-2026-7582: AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-7582/https://agentprime.io/advisories/CVE-2026-7582/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 May 2026 13:45:12 GMTCVECVE-2024-40630: HEIF Heap OOB Read in OpenImageIOhttps://agentprime.io/advisories/CVE-2024-40630/https://agentprime.io/advisories/CVE-2024-40630/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jul 2024 19:15:06 GMTCVE