CVEs we hold for Academysoftwarefoundation
Records whose assigning authority named Academysoftwarefoundation as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-7582AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds writeAcademySoftwareFoundation OpenImageIO
CVE-2026-68516OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflowAcademySoftwareFoundation openexr
CVE-2026-68515OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel unionAcademySoftwareFoundation openexr
CVE-2026-68514OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep imagesAcademySoftwareFoundation openexr
CVE-2026-68513OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collisionAcademySoftwareFoundation openexr
CVE-2026-67549OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds writeAcademySoftwareFoundation OpenImageIO
CVE-2026-65979OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)AcademySoftwareFoundation openexr
CVE-2026-65970OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`AcademySoftwareFoundation OpenImageIO
CVE-2026-65969OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGVAcademySoftwareFoundation OpenImageIO
CVE-2026-63638OpenImageIO: Cineon invalid bit depth heap out-of-bounds writeAcademySoftwareFoundation OpenImageIO
CVE-2026-63635OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoSAcademySoftwareFoundation OpenImageIO
CVE-2026-63422OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds writeAcademySoftwareFoundation OpenImageIO
CVE-2026-63420OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`AcademySoftwareFoundation OpenImageIO
CVE-2026-63419OpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferAcademySoftwareFoundation OpenImageIO
CVE-2026-62986OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosureAcademySoftwareFoundation openexr
CVE-2026-61555OpenEXR: Empty multiView viewFromChannelName file crashAcademySoftwareFoundation openexr
CVE-2026-59985OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32AcademySoftwareFoundation openexr
CVE-2026-59984OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32AcademySoftwareFoundation openexr
CVE-2026-59983OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32AcademySoftwareFoundation openexr
CVE-2026-59982OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platformsAcademySoftwareFoundation openexr
CVE-2026-59981OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindowAcademySoftwareFoundation openexr
CVE-2026-59956OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is setAcademySoftwareFoundation OpenImageIO
CVE-2026-59189OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow originAcademySoftwareFoundation openexr
CVE-2026-59187OpenEXR: exrmetrics deep pixelmode heap buffer overflowAcademySoftwareFoundation openexr
CVE-2026-59186OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) buildsAcademySoftwareFoundation openexr
CVE-2026-59184OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB writeAcademySoftwareFoundation openexr
CVE-2026-59183OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile DecodingAcademySoftwareFoundation openexr
CVE-2026-59181OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElementsAcademySoftwareFoundation OpenImageIO
CVE-2026-59156OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflowAcademySoftwareFoundation OpenImageIO
CVE-2026-55373OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countsAcademySoftwareFoundation openexr
CVE-2026-55371OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_lengthAcademySoftwareFoundation openexr
CVE-2026-55059OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerabilityAcademySoftwareFoundation openexr
CVE-2026-54920OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizeAcademySoftwareFoundation openexr
CVE-2026-53532OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)AcademySoftwareFoundation openexr
CVE-2026-50291OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)AcademySoftwareFoundation OpenImageIO
CVE-2026-45696OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)AcademySoftwareFoundation openexr
CVE-2026-44663OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflowAcademySoftwareFoundation openexr
CVE-2026-43996OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image…AcademySoftwareFoundation OpenImageIO
CVE-2026-43909OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoderAcademySoftwareFoundation OpenImageIO
CVE-2026-43908OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoderAcademySoftwareFoundation OpenImageIO
CVE-2026-43907OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr…AcademySoftwareFoundation OpenImageIO
CVE-2026-43905OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocationAcademySoftwareFoundation OpenImageIO
CVE-2026-43904OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image widthAcademySoftwareFoundation OpenImageIO
CVE-2026-43903OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release buildsAcademySoftwareFoundation OpenImageIO
CVE-2026-42450OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parserAcademySoftwareFoundation OpenColorIO
CVE-2026-42217OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)AcademySoftwareFoundation openexr
CVE-2026-42216OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionAcademySoftwareFoundation openexr
CVE-2026-41142OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIAcademySoftwareFoundation openexr
CVE-2026-40250OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)AcademySoftwareFoundation openexr
CVE-2026-40244OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)AcademySoftwareFoundation openexr
CVE-2026-39886OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()AcademySoftwareFoundation openexr
CVE-2026-34588OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteAcademySoftwareFoundation openexr
CVE-2026-34545OpenEXR: integer overflow lead to OOB in HTJ2K decoderAcademySoftwareFoundation openexr
CVE-2026-34544OpenEXR: integer overflow to OOB write in uncompress_b44_impl()AcademySoftwareFoundation openexr
CVE-2026-34543OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)AcademySoftwareFoundation openexr
CVE-2026-34380OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24…AcademySoftwareFoundation openexr
CVE-2026-34379OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)AcademySoftwareFoundation openexr
CVE-2026-34378OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.xAcademySoftwareFoundation openexr
CVE-2026-27622OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeAcademySoftwareFoundation openexr
CVE-2026-26981OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cppAcademySoftwareFoundation openexr
CVE-2025-64183OpenEXR has use after free in PyObject_StealAttrStringAcademySoftwareFoundation openexr
CVE-2025-64182OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()AcademySoftwareFoundation openexr
CVE-2025-53012MaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack ExhaustionAcademySoftwareFoundation MaterialX
CVE-2025-53011MaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutputAcademySoftwareFoundation MaterialX
CVE-2025-53010MaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer DereferenceAcademySoftwareFoundation MaterialX
CVE-2025-53009MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion LimitAcademySoftwareFoundation MaterialX
CVE-2025-48074OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory ErrorsAcademySoftwareFoundation openexr
CVE-2025-48073OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" ModeAcademySoftwareFoundation openexr
CVE-2025-48072OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds HeapAcademySoftwareFoundation openexr
CVE-2025-48071OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline ParsingAcademySoftwareFoundation openexr
CVE-2025-15506AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-boundsAcademySoftwareFoundation OpenColorIO
75 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.