Vulnerabilities in AcademySoftwareFoundation
76 resultsCVE-2026-34380MEDIUMOpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompressionEPSS 0.3%CVE-2025-64182MEDIUMOpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()EPSS 0.3%CVE-2026-34544HIGHOpenEXR: integer overflow to OOB write in uncompress_b44_impl()EPSS 0.3%CVE-2026-27622HIGHOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writeEPSS 0.2%CVE-2025-48073MEDIUMOpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" ModeEPSS 0.2%CVE-2026-63419HIGHOpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferEPSS 0.2%CVE-2026-59184HIGHOpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB writeEPSS 0.2%CVE-2026-44663MEDIUMOpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflowEPSS 0.2%CVE-2026-63422HIGHOpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds writeEPSS 0.2%CVE-2026-63420MEDIUMOpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`EPSS 0.2%CVE-2026-59181MEDIUMOpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElementsEPSS 0.2%CVE-2026-59956MEDIUMOpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is setEPSS 0.2%CVE-2026-50291MEDIUMOpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)EPSS 0.2%CVE-2026-65969MEDIUMOpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGVEPSS 0.2%CVE-2026-68513HIGHOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collisionEPSS 0.2%CVE-2026-63635MEDIUMOpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoSEPSS 0.2%CVE-2026-68515HIGHOpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel unionEPSS 0.2%CVE-2026-43906HIGHOpenImageIO: HEIF Heap overflowEPSS 0.2%CVE-2026-68514MEDIUMOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep imagesEPSS 0.2%CVE-2026-42450HIGHOpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parserEPSS 0.2%