OP
Product
OpenImageIO
21
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 11Medium 10Low 0
Watch
Add OpenImageIO to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59156 | 6.5 | Sep 18 | OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow Affected: < 3.0.20.0; >= 3.1.0.0, < 3.1.15.0; >= 3.2.0.0-dev, < 3.2.0.3-beta1 |
| CVE-2026-59181 | 6.1 | Sep 18 | OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements Affected: < 3.0.20.0; >= 3.1.0.0, < 3.1.15.0; >= 3.2.0.0-dev, < 3.2.0.3-beta1 |
| CVE-2026-59956 | 6.1 | Sep 18 | OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set Affected: < 3.0.20.0; >= 3.1.0.0, < 3.1.15.0; >= 3.2.0.0-dev, < 3.2.0.3-beta1 |
| CVE-2026-113681 | 5.5 | Oct 20 | OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read Affected: before 3.0.20.0; 3.1.0.0 before 3.1.15.0; 3.2.0.0-dev before 3.2.0.3-beta1 |
| CVE-2026-65969 | 5.5 | Sep 18 | OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV Affected: < 3.0.21.0; >= 3.1.0.0, < 3.1.16.0; >= 3.2.0.0-dev, < 3.2.0.3-beta1 |
| CVE-2026-63635 | 5.5 | Sep 18 | OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS Affected: < 3.0.21.0; >= 3.1.0.0, < 3.1.16.0; >= 3.2.0.0-dev, < 3.2.0.3-beta1 |
| CVE-2026-63420 | 5.5 | Sep 18 | OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` Affected: < 3.0.21.0; >= 3.1.0.0, < 3.1.16.0; >= 3.2.0.0-dev, < 3.2.0.3-beta1 |
| CVE-2026-50291 | 5.5 | Sep 17 | OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) Affected: < 3.0.16.0; >= 3.1.0.0, < 3.1.11.0 |
| CVE-2026-43996 | 5.5 | May 14 | OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder Affected: < 3.0.18.0; >= 3.1.4.0-beta, < 3.1.13.0 |
| CVE-2026-65970 | 5.3 | Sep 18 | OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` Affected: < 3.1.16.0 |
Showing 10