Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OpenImageIO — Vulnerabilities & Security Advisories 51

All 51 CVE vulnerabilities found in OpenImageIO, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting OpenImageIO, an open-source image processing library developed by Industrial Light & Magic, specifically focusing on code execution and denial-of-service weaknesses tagged with high severity. The collection encompasses publicly disclosed flaws reported between 2015 and the present, including issues related to integer overflows, buffer overflows, and improper input validation within image parsing modules. Users visiting this resource can track the vendor's historical security advisories to monitor patch release timelines, analyze the prevalence of specific weakness classes like memory corruption within the imaging domain, or review the complete vulnerability history of the OpenImageIO product to assess risk for legacy deployments. The data presented here serves as a centralized reference for security researchers and system administrators seeking to understand the exposure landscape of this critical rendering and image manipulation tool without relying on scattered external reports. By consolidating these findings, the page facilitates efficient threat assessment and helps organizations prioritize remediation efforts based on the severity and exploitability of identified defects in their imaging pipelines.

Vendor: OpenImageIO Project

CVE ID Title CVSS Severity Published
CVE-2026-113681 OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read CWE-190 5.5 Medium 2026-10-20
CVE-2026-65969 OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV CWE-125 5.5 Medium 2026-09-18
CVE-2026-67549 OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write CWE-122 7.6 High 2026-09-18
CVE-2026-63638 OpenImageIO: Cineon invalid bit depth heap out-of-bounds write CWE-787 8.3 High 2026-09-18
CVE-2026-63419 OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer CWE-787 7.8 High 2026-09-18
CVE-2026-65970 OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` CWE-825 5.3 Medium 2026-09-18
CVE-2026-63635 OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS CWE-125 5.5 Medium 2026-09-18
CVE-2026-63422 OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write CWE-122 7.8 High 2026-09-18
CVE-2026-63420 OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` CWE-125 5.5 Medium 2026-09-18
CVE-2026-59181 OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements CWE-121 6.1 Medium 2026-09-18
CVE-2026-59156 OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow CWE-674 6.5 Medium 2026-09-18
CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set CWE-125 6.1 Medium 2026-09-18
CVE-2026-50291 OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399) CWE-125 5.5 Medium 2026-09-17
CVE-2026-43903 OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds CWE-787 - - 2026-05-14
CVE-2026-43904 OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width CWE-787 - - 2026-05-14
CVE-2026-43905 OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation CWE-190 - - 2026-05-14
CVE-2026-43996 OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder CWE-125 5.5 Medium 2026-05-14
CVE-2026-43907 OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) CWE-190 8.3 High 2026-05-14
CVE-2026-43908 OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder CWE-190 8.8 High 2026-05-14
CVE-2026-43909 OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder CWE-125 8.8 High 2026-05-14
CVE-2026-43906 OpenImageIO: HEIF Heap overflow CWE-122 - - 2026-05-14
CVE-2026-7582 AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write CWE-787 5.3 Medium 2026-05-01
CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO CWE-125 4.3 Medium 2024-07-15
CVE-2023-3430 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp CWE-122 7.5 High 2023-12-18
CVE-2023-22845 OpenImageIO 缓冲区错误漏洞 CWE-125 7.5 High 2023-03-30
CVE-2023-24473 OpenImageIO 缓冲区错误漏洞 CWE-125 5.3 Medium 2023-03-30
CVE-2023-24472 OpenImageIO 安全漏洞 CWE-674 7.5 High 2023-03-30
CVE-2022-43592 OpenImageIO 缓冲区错误漏洞 CWE-125 5.9 - 2022-12-23
CVE-2022-38143 OpenImageIO 缓冲区错误漏洞 CWE-123 9.8 - 2022-12-23
CVE-2022-41639 OpenImageIO 缓冲区错误漏洞 CWE-122 9.8 - 2022-12-23

All 51 known CVE vulnerabilities affecting OpenImageIO with full Chinese analysis, references, and POCs where available.