# cve.now: Academysoftwarefoundation

The newest entries naming Academysoftwarefoundation as an affected vendor (up to 200), of 76 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-113681](https://cve.now/CVE-2026-113681.md): OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read (CVSS 6.8)
- [CVE-2026-65969](https://cve.now/CVE-2026-65969.md): OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV (CVSS 5.5)
- [CVE-2026-67549](https://cve.now/CVE-2026-67549.md): OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write (CVSS 7.6)
- [CVE-2026-63638](https://cve.now/CVE-2026-63638.md): OpenImageIO: Cineon invalid bit depth heap out-of-bounds write (CVSS 8.3)
- [CVE-2026-63419](https://cve.now/CVE-2026-63419.md): OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer (CVSS 7.8)
- [CVE-2026-65970](https://cve.now/CVE-2026-65970.md): OpenImageIO: TIFF multithreaded scanline read use-after-scope in \`TIFFInput::read\_native\_scanlines\` (CVSS 5.3)
- [CVE-2026-63635](https://cve.now/CVE-2026-63635.md): OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS (CVSS 5.5)
- [CVE-2026-63422](https://cve.now/CVE-2026-63422.md): OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write (CVSS 7.8)
- [CVE-2026-63420](https://cve.now/CVE-2026-63420.md): OpenImageIO: PSD RawColor indexed image out-of-bounds read in \`interleave\_row\` (CVSS 5.5)
- [CVE-2026-59181](https://cve.now/CVE-2026-59181.md): OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements (CVSS 6.1)
- [CVE-2026-59156](https://cve.now/CVE-2026-59156.md): OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow (CVSS 6.5)
- [CVE-2026-59956](https://cve.now/CVE-2026-59956.md): OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set (CVSS 6.1)
- [CVE-2026-50291](https://cve.now/CVE-2026-50291.md): OpenImageIO: Segmentation Fault in BmpInput::read\_native\_scanline (bmpinput.cpp:399) (CVSS 5.5)
- [CVE-2026-59981](https://cve.now/CVE-2026-59981.md): OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow (CVSS 7.1)
- [CVE-2026-68514](https://cve.now/CVE-2026-68514.md): OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images (CVSS 5.5)
- [CVE-2026-68515](https://cve.now/CVE-2026-68515.md): OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union (CVSS 7.1)
- [CVE-2026-68513](https://cve.now/CVE-2026-68513.md): OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision (CVSS 7.1)
- [CVE-2026-65979](https://cve.now/CVE-2026-65979.md): OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN) (CVSS 6.7)
- [CVE-2026-62986](https://cve.now/CVE-2026-62986.md): OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure (CVSS 4.3)
- [CVE-2026-61555](https://cve.now/CVE-2026-61555.md): OpenEXR: Empty multiView viewFromChannelName file crash (CVSS 5.5)
- [CVE-2026-59985](https://cve.now/CVE-2026-59985.md): OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32 (CVSS 5.5)
- [CVE-2026-59984](https://cve.now/CVE-2026-59984.md): OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32 (CVSS 5.5)
- [CVE-2026-59983](https://cve.now/CVE-2026-59983.md): OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32 (CVSS 5.5)
- [CVE-2026-59982](https://cve.now/CVE-2026-59982.md): OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms (CVSS 7.1)
- [CVE-2026-59189](https://cve.now/CVE-2026-59189.md): OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin (CVSS 7.1)
- [CVE-2026-59187](https://cve.now/CVE-2026-59187.md): OpenEXR: exrmetrics deep pixelmode heap buffer overflow (CVSS 7.1)
- [CVE-2026-59186](https://cve.now/CVE-2026-59186.md): OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds (CVSS 7.1)
- [CVE-2026-59184](https://cve.now/CVE-2026-59184.md): OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write (CVSS 7.1)
- [CVE-2026-59183](https://cve.now/CVE-2026-59183.md): OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding (CVSS 5.5)
- [CVE-2026-55373](https://cve.now/CVE-2026-55373.md): OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT\_MAX sample counts (CVSS 6.2)
- [CVE-2026-55371](https://cve.now/CVE-2026-55371.md): OpenEXR: OpenEXRCore exr\_attr\_set\_bytes() accepts NULL type\_hint with positive hint\_length (CVSS 6.9)
- [CVE-2026-55059](https://cve.now/CVE-2026-55059.md): OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability (CVSS 6.1)
- [CVE-2026-54920](https://cve.now/CVE-2026-54920.md): OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize (CVSS 0.0)
- [CVE-2026-53532](https://cve.now/CVE-2026-53532.md): OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS) (CVSS 7.1)
- [CVE-2026-68516](https://cve.now/CVE-2026-68516.md): OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow (CVSS 6.5)
- [CVE-2026-42450](https://cve.now/CVE-2026-42450.md): OpenColorIO vulnerable to stack buffer overflow via unbounded \`sscanf %s\` in Spi3D (.spi3d) LUT parser (CVSS 8.4)
- [CVE-2026-45696](https://cve.now/CVE-2026-45696.md): OpenEXR HTJ2K decoder heap buffer over-read in ht\_undo\_impl() (DoS) (CVSS 8.3)
- [CVE-2026-44663](https://cve.now/CVE-2026-44663.md): OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow (CVSS 6.1)
- [CVE-2026-43903](https://cve.now/CVE-2026-43903.md): OpenImageIO: SGI RLE decoder heap buffer overflow OIIO\_DASSERT bounds checks are no-ops in release builds (CVSS 8.4)
- [CVE-2026-43904](https://cve.now/CVE-2026-43904.md): OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width (CVSS 8.4)
- [CVE-2026-43905](https://cve.now/CVE-2026-43905.md): OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation (CVSS 7.1)
- [CVE-2026-43996](https://cve.now/CVE-2026-43996.md): OpenImageIO: Integer wraparound in bounds check of decode\_pixel leads to out-of-bounds read in TGA paletted image decoder (CVSS 5.5)
- [CVE-2026-43907](https://cve.now/CVE-2026-43907.md): OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR) (CVSS 8.3)
- [CVE-2026-43908](https://cve.now/CVE-2026-43908.md): OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder (CVSS 8.8)
- [CVE-2026-43909](https://cve.now/CVE-2026-43909.md): OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder (CVSS 8.8)
- [CVE-2026-43906](https://cve.now/CVE-2026-43906.md): OpenImageIO: HEIF Heap overflow (CVSS 8.5)
- [CVE-2026-42217](https://cve.now/CVE-2026-42217.md): OpenEXR: Shift exponent overflow in \`readVariableLengthInteger()\` (\`ImfIDManifest.cpp\`) (CVSS 6.3)
- [CVE-2026-42216](https://cve.now/CVE-2026-42216.md): OpenEXR: Out-of-bounds read in \`IDManifest::init()\` during prefix expansion (CVSS 8.8)
- [CVE-2026-41142](https://cve.now/CVE-2026-41142.md): OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API (CVSS 8.8)
- [CVE-2026-7582](https://cve.now/CVE-2026-7582.md): AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write (CVSS 4.8)
- [CVE-2026-40250](https://cve.now/CVE-2026-40250.md): OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589) (CVSS 8.4)
- [CVE-2026-40244](https://cve.now/CVE-2026-40244.md): OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589) (CVSS 8.4)
- [CVE-2026-39886](https://cve.now/CVE-2026-39886.md): OpenEXR has HTJ2K Signed Integer Overflow in ht\_undo\_impl() (CVSS 5.3)
- [CVE-2026-34589](https://cve.now/CVE-2026-34589.md): OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write (CVSS 8.4)
- [CVE-2026-34588](https://cve.now/CVE-2026-34588.md): OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write (CVSS 8.6)
- [CVE-2026-34380](https://cve.now/CVE-2026-34380.md): OpenEXR has a signed integer overflow (undefined behavior) in undo\_pxr24\_impl may allow bounds-check bypass in PXR24 decompression (CVSS 5.9)
- [CVE-2026-34379](https://cve.now/CVE-2026-34379.md): OpenEXR has a misaligned write in LossyDctDecoder\_execute leading to undefined behavior (DWA/DWAB decompression) (CVSS 7.1)
- [CVE-2026-34378](https://cve.now/CVE-2026-34378.md): OpenEXR has a signed integer overflow in generic\_unpack() when parsing EXR files with crafted negative dataWindow.min.x (CVSS 6.5)
- [CVE-2026-34543](https://cve.now/CVE-2026-34543.md): OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo\_pxr24\_impl) (CVSS 8.7)
- [CVE-2026-34544](https://cve.now/CVE-2026-34544.md): OpenEXR: integer overflow to OOB write in uncompress\_b44\_impl() (CVSS 8.4)
- [CVE-2026-34545](https://cve.now/CVE-2026-34545.md): OpenEXR: integer overflow lead to OOB in HTJ2K decoder (CVSS 8.4)
- [CVE-2026-27622](https://cve.now/CVE-2026-27622.md): OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write (CVSS 8.4)
- [CVE-2026-26981](https://cve.now/CVE-2026-26981.md): OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp (CVSS 6.5)
- [CVE-2025-15506](https://cve.now/CVE-2025-15506.md): AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds (CVSS 4.8)
- [CVE-2025-64183](https://cve.now/CVE-2025-64183.md): OpenEXR has use after free in PyObject\_StealAttrString (CVSS 5.5)
- [CVE-2025-64182](https://cve.now/CVE-2025-64182.md): OpenEXR has buffer overflow in PyOpenEXR\_old's channels() and channel() (CVSS 5.5)
- [CVE-2025-64181](https://cve.now/CVE-2025-64181.md): OpenEXR Makes Use of Uninitialized Memory (CVSS 2.0)
- [CVE-2025-53012](https://cve.now/CVE-2025-53012.md): MaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion (CVSS 5.5)
- [CVE-2025-53011](https://cve.now/CVE-2025-53011.md): MaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutput (CVSS 2.0)
- [CVE-2025-53010](https://cve.now/CVE-2025-53010.md): MaterialX's unchecked nodeGraph-\>getOutput return is vulnerable to NULL Pointer Dereference (CVSS 2.0)
- [CVE-2025-53009](https://cve.now/CVE-2025-53009.md): MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit (CVSS 5.5)
- [CVE-2025-48074](https://cve.now/CVE-2025-48074.md): OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors (CVSS 4.6)
- [CVE-2025-48073](https://cve.now/CVE-2025-48073.md): OpenEXR ScanLineProcess::run\_fill NULL Pointer Write In "reduceMemory" Mode (CVSS 4.6)
- [CVE-2025-48072](https://cve.now/CVE-2025-48072.md): OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap (CVSS 6.8)
- [CVE-2025-48071](https://cve.now/CVE-2025-48071.md): OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing (CVSS 8.4)
- [CVE-2024-40630](https://cve.now/CVE-2024-40630.md): HEIF Heap OOB Read in OpenImageIO (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/academysoftwarefoundation
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.