5.5Mittel
CVE-2026-113681OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read
Beschreibung
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing a heap out-of-bounds read. Attackers can supply a crafted Cineon file with a huge declared width that wraps the size calculation to zero, so UnPackPacked reads past a 4-byte buffer and crashes the application.
Schwachstellentyp (CWE):
CWE-190
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| AcademySoftwareFoundation | OpenImageIO | < 3.0.20.0, 3.1.0.0 – < 3.1.15.0, 3.2.0.0-dev – < 3.2.0.3-beta1 | |
| openimageio | openimageio | < 3.0.20.0 |
Referenzen und Patches
- https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5567 patchissue-tracking
- https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5568 patchissue-tracking
- https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/07e3c3e0373551c57e7d8e01353deaa4b3646613 patch
- https://github.com/AcademySoftwareFoundation/OpenImageIO/blob/v3.0.19.0/src/cineon.imageio/libcineon/Codec.cp… technical-description
- VulnCheck Advisory: OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read third-party-advisory