AcademySoftwareFoundation güvenlik açıkları (CVE)

AcademySoftwareFoundation için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

75 sonuç
8.3Yüksek
CVE-2026-63638

OpenImageIO: Cineon invalid bit depth heap out-of-bounds write

AcademySoftwareFoundation OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image can declare unsupported component bit depth 26. cineoninpu…

7.8Yüksek
CVE-2026-63419

OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer

AcademySoftwareFoundation OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled iff is exposed with a 16-bit public imagespec while the deco…

4.3Orta
CVE-2026-62986

OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure

AcademySoftwareFoundation openexr

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a…

5.5Orta
CVE-2026-61555

OpenEXR: Empty multiView viewFromChannelName file crash

AcademySoftwareFoundation openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::Ge…

7.1Yüksek
CVE-2026-59982

OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

AcademySoftwareFoundation openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepIm…