Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

OpenImageIO — Vulnerabilities & Security Advisories 38

All 38 CVE vulnerabilities found in OpenImageIO, with AI-generated Chinese analysis, references, and POCs.

This page catalogs Common Weakness Enumeration vulnerabilities associated with the OpenImageIO software product, focusing on its security posture and exposure to known defects. It aggregates a comprehensive collection of identified security flaws, ranging from memory corruption issues to improper input validation errors, spanning from the software’s early releases through the most recent updates released in the current year. By consolidating data from various tracking sources and official security advisories, this resource provides a unified view of the historical and ongoing security risks inherent in this specific open-source tool. Users can leverage this aggregation to track vendor security advisories and monitor how the OpenImageIO development team responds to emerging threats over time. Furthermore, individuals studying software security can utilize this page to understand the prevalence and nature of specific weakness classes within image processing libraries, gaining insight into common pitfalls in C++ development. This centralized approach allows developers, security analysts, and system administrators to look up a product's vulnerability history efficiently, facilitating better risk assessment and mitigation strategies for environments relying on OpenImageIO. The data presented is strictly informational, aiming to enhance transparency regarding the security lifecycle of the software without offering remediation advice. Readers are encouraged to cross-reference the listed weaknesses with official documentation and patch notes to ensure accurate implementation of fixes in their respective infrastructure.

Vendor: OpenImageIO Project

CVE ID Title CVSS Severity Published
CVE-2026-43903 OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds CWE-787 - - 2026-05-14
CVE-2026-43904 OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width CWE-787 - - 2026-05-14
CVE-2026-43905 OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation CWE-190 - - 2026-05-14
CVE-2026-43996 OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder CWE-125 5.5 Medium 2026-05-14
CVE-2026-43907 OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) CWE-190 8.3 High 2026-05-14
CVE-2026-43908 OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder CWE-190 8.8 High 2026-05-14
CVE-2026-43909 OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder CWE-125 8.8 High 2026-05-14
CVE-2026-43906 OpenImageIO: HEIF Heap overflow CWE-122 - - 2026-05-14
CVE-2026-7582 AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write CWE-787 5.3 Medium 2026-05-01
CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO CWE-125 4.3 Medium 2024-07-15
CVE-2023-3430 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp CWE-122 7.5 High 2023-12-18
CVE-2023-24473 OpenImageIO 缓冲区错误漏洞 CWE-125 5.3 Medium 2023-03-30
CVE-2023-22845 OpenImageIO 缓冲区错误漏洞 CWE-125 7.5 High 2023-03-30
CVE-2023-24472 OpenImageIO 安全漏洞 CWE-674 7.5 High 2023-03-30
CVE-2022-43599 OpenImageIO 安全漏洞 CWE-122 8.1 - 2022-12-23
CVE-2022-43603 OpenImageIO 代码问题漏洞 CWE-476 7.5 - 2022-12-23
CVE-2022-43602 OpenImageIO 安全漏洞 CWE-122 8.1 - 2022-12-23
CVE-2022-43601 OpenImageIO 安全漏洞 CWE-122 8.1 - 2022-12-23
CVE-2022-43600 OpenImageIO 安全漏洞 CWE-122 8.1 - 2022-12-23
CVE-2022-41988 OpenImageIO 缓冲区错误漏洞 CWE-125 7.5 - 2022-12-23
CVE-2022-38143 OpenImageIO 缓冲区错误漏洞 CWE-123 9.8 - 2022-12-23
CVE-2022-41639 OpenImageIO 缓冲区错误漏洞 CWE-122 9.8 - 2022-12-23
CVE-2022-41649 OpenImageIO 缓冲区错误漏洞 CWE-125 7.4 - 2022-12-23
CVE-2022-41684 OpenImageIO 缓冲区错误漏洞 CWE-125 6.5 - 2022-12-23
CVE-2022-41794 OpenImageIO 缓冲区错误漏洞 CWE-122 9.8 - 2022-12-23
CVE-2022-41837 OpenImageIO 缓冲区错误漏洞 CWE-562 9.8 - 2022-12-23
CVE-2022-41838 OpenImageIO 缓冲区错误漏洞 CWE-122 9.8 - 2022-12-23
CVE-2022-41977 OpenImageIO 缓冲区错误漏洞 CWE-125 4.0 - 2022-12-23
CVE-2022-41981 OpenImageIO 缓冲区错误漏洞 CWE-121 8.1 High 2022-12-23
CVE-2022-36354 OpenImageIO 安全漏洞 CWE-193 5.3 Medium 2022-12-23

All 38 known CVE vulnerabilities affecting OpenImageIO with full Chinese analysis, references, and POCs where available.