Skip to content
Noroxi

openimageio records

55 published records for vendor openimageio.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
90.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

55 records
  • CVE-2022-41794
    40Plan

    A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-41639
    40Plan

    A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.

    CriticalCVSS 9.8No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-41838
    40Plan

    A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

    CriticalCVSS 9.8No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-41837
    39Monitor

    An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.

    CriticalCVSS 9.8No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-38143
    39Monitor

    A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images.

    CriticalCVSS 9.8No exploitEPSS 1%

    openimageio · openimageioDec 22, 2022

  • CVE-2023-42299
    39Monitor

    Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of servic

    CriticalCVSS 9.8No exploitEPSS 1%

    openimageio · openimageioNov 2, 2023

  • CVE-2024-55194
    39Monitor

    OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h.

    CriticalCVSS 9.8No exploitEPSS 1%

    openimageio · openimageioJan 23, 2025

  • CVE-2024-55192
    39Monitor

    OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char cons

    CriticalCVSS 9.8No exploitEPSS 1%

    openimageio · openimageioJan 23, 2025

  • CVE-2024-55193
    39Monitor

    OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/string_view.h.

    CriticalCVSS 9.8No exploitEPSS 1%

    openimageio · openimageioJan 23, 2025

  • CVE-2022-41649
    36Monitor

    A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0.

    CriticalCVSS 9.1No exploitEPSS 1%

    openimageio · openimageioDec 22, 2022

  • CVE-2023-42295
    35Monitor

    An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_im

    HighCVSS 8.8No exploitEPSS 1%

    openimageio · openimageioOct 23, 2023

  • CVE-2026-43908
    35Monitor

    OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder

    HighCVSS 8.8No exploitEPSS 0%

    openimageio · openimageioMay 14, 2026

  • CVE-2026-43909
    35Monitor

    OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder

    HighCVSS 8.8No exploitEPSS 0%

    openimageio · openimageioMay 14, 2026

  • CVE-2026-43906
    34Monitor

    OpenImageIO: HEIF Heap overflow

    HighCVSS 8.5No exploitEPSS 0%

    openimageio · openimageioMay 14, 2026

  • CVE-2022-43599
    33Monitor

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

    HighCVSS 8.1No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-43602
    33Monitor

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

    HighCVSS 8.1No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-43597
    33Monitor

    Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.

    HighCVSS 8.1No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-43598
    33Monitor

    Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.

    HighCVSS 8.1No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2026-43907
    33Monitor

    OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)

    HighCVSS 8.3No exploitEPSS 0%

    openimageio · openimageioMay 14, 2026

  • CVE-2026-63638
    33Monitor

    OpenImageIO: Cineon invalid bit depth heap out-of-bounds write

    HighCVSS 8.3No exploitEPSS 0%

    openimageio · openimageioSep 18, 2026

  • CVE-2026-43904
    33Monitor

    OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image width

    HighCVSS 8.4No exploitEPSS 0%

    openimageio · openimageioMay 14, 2026

  • CVE-2026-43903
    33Monitor

    OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release builds

    HighCVSS 8.4No exploitEPSS 0%

    openimageio · openimageioMay 14, 2026

  • CVE-2022-43601
    32Monitor

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

    HighCVSS 8.1No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-43600
    32Monitor

    Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

    HighCVSS 8.1No exploitEPSS 2%

    openimageio · openimageioDec 22, 2022

  • CVE-2022-41981
    32Monitor

    A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0.

    HighCVSS 8.1No exploitEPSS 1%

    openimageio · openimageioDec 22, 2022