Openimageio / OpenImageIO
43 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-43903 | OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds | HIGH | 8.4 | May 14, 2026 |
| CVE-2026-43904 | OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width | HIGH | 8.4 | May 14, 2026 |
| CVE-2026-43905 | OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation | HIGH | 7.1 | May 14, 2026 |
| CVE-2026-43996 | OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder | MEDIUM | 5.5 | May 14, 2026 |
| CVE-2026-43907 | OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) | HIGH | 8.3 | May 14, 2026 |
| CVE-2026-43908 | OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder | HIGH | 8.8 | May 14, 2026 |
| CVE-2026-43909 | OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder | HIGH | 8.8 | May 14, 2026 |
| CVE-2026-43906 | OpenImageIO: HEIF Heap overflow | HIGH | 8.5 | May 14, 2026 |
| CVE-2024-55194 | OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h. | CRITICAL | 9.8 | Jan 23, 2025 |
| CVE-2024-55193 | OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/string_view.h. | CRITICAL | 9.8 | Jan 23, 2025 |
| CVE-2024-55192 | OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*). | CRITICAL | 9.8 | Jan 23, 2025 |
| CVE-2024-40630 | HEIF Heap OOB Read in OpenImageIO | MEDIUM | 4.3 | Jul 15, 2024 |
| CVE-2023-3430 | Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp | HIGH | 7.5 | Dec 18, 2023 |
| CVE-2023-42299 | Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subi… | CRITICAL | 9.8 | Nov 2, 2023 |
| CVE-2023-42295 | An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of fil… | HIGH | 8.8 | Oct 23, 2023 |
| CVE-2023-36183 | Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted fil… | HIGH | 7.8 | Jul 3, 2023 |
| CVE-2023-24473 | An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted… | HIGH | 7.5 | Mar 30, 2023 |
| CVE-2023-22845 | An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa… | HIGH | 7.5 | Mar 30, 2023 |
| CVE-2023-24472 | A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput… | HIGH | 7.5 | Mar 30, 2023 |
| CVE-2022-43603 | A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput… | MEDIUM | 5.9 | Dec 23, 2022 |
| CVE-2022-43602 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… | HIGH | 8.1 | Dec 23, 2022 |
| CVE-2022-43601 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… | HIGH | 8.1 | Dec 23, 2022 |
| CVE-2022-43600 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… | HIGH | 8.1 | Dec 23, 2022 |
| CVE-2022-43599 | Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOut… | HIGH | 8.1 | Dec 23, 2022 |
| CVE-2022-43598 | Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially craf… | HIGH | 8.1 | Dec 23, 2022 |
Showing 1 to 25 of 43 CVEs