Vulnerabilidades de AcademySoftwareFoundation (CVE)

Registros CVE publicados para AcademySoftwareFoundation, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

75 resultados
8.3Alta
CVE-2026-63638

OpenImageIO: Cineon invalid bit depth heap out-of-bounds write

AcademySoftwareFoundation OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image can declare unsupported component bit depth 26. cineoninpu…

7.8Alta
CVE-2026-63419

OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer

AcademySoftwareFoundation OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the deco…

4.3Media
CVE-2026-62986

OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure

AcademySoftwareFoundation openexr

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a…

5.5Media
CVE-2026-61555

OpenEXR: Empty multiView viewFromChannelName file crash

AcademySoftwareFoundation openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::Ge…

7.1Alta
CVE-2026-59982

OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

AcademySoftwareFoundation openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepIm…