VYPR

Openimageio

by AcademySoftwareFoundation

Source repositories

CVEs (25)

  • CVE-2026-63420MedSep 18, 2026
    risk 0.29cvss 5.5epss 0.00

    OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata creates fewer stored channel_buffers than the…

  • CVE-2026-50291MedSep 17, 2026
    risk 0.29cvss 5.5epss 0.00

    OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette…

  • CVE-2026-65970MedSep 18, 2026
    risk 0.27cvss 5.3epss 0.00

    OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::read_native_scanlines() return…

  • CVE-2026-7582MedMay 1, 2026
    risk 0.27cvss 5.3epss 0.00

    A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be…

  • CVE-2024-40630MedJul 15, 2024
    risk 0.21cvss 4.3epss 0.00

    OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in…

Page 2 of 2