Academysoftwarefoundation vulnerabilities
76 CVEs and advisories name Academysoftwarefoundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-113681OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read
- CVE-2026-65969OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV
- CVE-2026-67549OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write
- CVE-2026-63638OpenImageIO: Cineon invalid bit depth heap out-of-bounds write
- CVE-2026-63419OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer
- CVE-2026-65970OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`
- CVE-2026-63635OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS
- CVE-2026-63422OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write
- CVE-2026-63420OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`
- CVE-2026-59181OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements
- CVE-2026-59156OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow
- CVE-2026-59956OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
- CVE-2026-50291OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)
- CVE-2026-59981OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow
- CVE-2026-68514OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images
- CVE-2026-68515OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union
- CVE-2026-68513OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision
- CVE-2026-65979OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)
- CVE-2026-62986OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure
- CVE-2026-61555OpenEXR: Empty multiView viewFromChannelName file crash
- CVE-2026-59985OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32
- CVE-2026-59984OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32
- CVE-2026-59983OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32
- CVE-2026-59982OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms
- CVE-2026-59189OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin
- CVE-2026-59187OpenEXR: exrmetrics deep pixelmode heap buffer overflow
- CVE-2026-59186OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds
- CVE-2026-59184OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write
- CVE-2026-59183OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding
- CVE-2026-55373OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts