Vulnerabilities in AcademySoftwareFoundation

76 results
CVE-2025-53012MEDIUMMaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack ExhaustionEPSS 1.0%CVE-2025-53009MEDIUMMaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion LimitEPSS 0.7%CVE-2026-34545HIGHOpenEXR: integer overflow lead to OOB in HTJ2K decoderEPSS 0.6%CVE-2025-53011LOWMaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutputEPSS 0.6%CVE-2026-26981MEDIUMOpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cppEPSS 0.6%CVE-2025-48072MEDIUMOpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds HeapEPSS 0.6%CVE-2025-53010LOWMaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer DereferenceEPSS 0.5%CVE-2026-34588HIGHOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteEPSS 0.5%CVE-2026-34543HIGHOpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)EPSS 0.5%CVE-2026-42216HIGHOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionEPSS 0.5%CVE-2026-63638HIGHOpenImageIO: Cineon invalid bit depth heap out-of-bounds writeEPSS 0.5%CVE-2026-68516MEDIUMOpenEXR: HTJ2K SIZ image-offset gap stack buffer overflowEPSS 0.5%CVE-2026-40250HIGHOpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)EPSS 0.4%CVE-2024-40630MEDIUMHEIF Heap OOB Read in OpenImageIOEPSS 0.4%CVE-2026-53532HIGHOpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)EPSS 0.4%CVE-2026-41142HIGHOpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIEPSS 0.4%CVE-2026-40244HIGHOpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)EPSS 0.4%CVE-2026-34589HIGHOpenEXR: DWA Lossy Decoder Heap Out-of-Bounds WriteEPSS 0.4%CVE-2026-65970MEDIUMOpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`EPSS 0.4%CVE-2026-45696HIGHOpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)EPSS 0.4%