Known vulnerabilities in oiio
Vendor:
OpenImageIO
Software:
oiio
Software CPE:
cpe:2.3:a:OpenImageIO:oiio:*:*:*:*:*:*:*:*
Website:
https://github.com/OpenImageIO
Total vulnerabilities:
43
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.0.21.0
3.1.16.0
3.1.15.0
3.0.20.0
3.1.14.1
3.0.19.1
3.1.14.0
3.0.19.0
3.1.13.1
3.1.13.0
3.0.18.1
3.0.18.0
3.1.12.1
3.1.12.0
3.0.17.0
3.1.11.0
3.0.16.0
3.1.10.0
3.0.15.0
3.1.9.0
3.0.14.0
3.1.8.0
3.0.13.0
3.1.7.0
3.0.12.0
3.1.6.2
3.1.6.1
3.0.11.0
3.0.10.1
2.5.19.1
3.0.10.0
3.0.9.1
3.0.9.0
2.5.19.0
3.0.8.1
3.0.8.0
3.0.7.0
3.0.6.1
3.0.6.0
3.0.5.0
3.0.4.0
3.0.3.1
3.0.3.0
3.0.2.0
2.5.18.0
3.0.1.0
3.0.0.3
2.5.17.0
2.5.16.0
2.5.15.0
2.5.14.0
2.5.13.1
2.5.13.0
2.5.12.0
2.5.11.0
2.5.10.1
2.5.10.0
2.5.9.0
2.5.8.0
2.5.7.0
2.5.6.0
2.4.17.0
2.5.5.0
2.5.4.0
2.4.16.0
2.4.15.0
2.4.14.0
2.4.13.0
2.4.12.0
2.4.11.1
2.4.11.0
1.6.14
2.1.18.1
1.8.9
1.8.13
1.8.12
1.7.14
1.8.15
2.4.10.0
2.4.9.0
2.4.8.1
2.4.8.0
2.4.7.1
2.4.7.0
2.4.6.1
2.4.6.0
2.4.5.0
2.4.4.2
2.4.4.1
2.3.21.0
2.3.20.0
2.3.19.0
2.3.18.0
2.3.17.0
2.3.16.0
2.3.15.0
2.3.14.0
2.3.13.0
2.3.12.0
2.3.11.0
2.3.10.1
2.3.10.0
2.3.9.1
2.3.8.0
2.3.7.2
2.2.21.0
2.2.20.0
2.2.19.0
2.2.18.0
2.2.17.0
2.2.16.0
2.2.15.1
2.2.15.0
2.2.14.0
2.2.13.1
2.2.13.0
2.2.12.0
2.2.11.1
2.2.11.0
2.2.10.1
2.2.10.0
2.2.9.0
2.2.8.0
2.2.7.0
2.2.6.1
2.1.20.0
2.0.14
Vulnerabilities (43)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140743 - Out-of-bounds write CVE-2026-63419 |
CWE-787 | High | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140742 - Heap-based Buffer Overflow CVE-2026-63422 |
CWE-122 | High | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140741 - Out-of-bounds read CVE-2026-63420 |
CWE-125 | Medium | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140740 - Out-of-bounds write CVE-2026-63638 |
CWE-787 | High | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140739 - Out-of-bounds read CVE-2026-63635 |
CWE-125 | Medium | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140738 - Expired pointer dereference CVE-2026-65970 |
CWE-825 | Medium | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140737 - Heap-based Buffer Overflow CVE-2026-67549 |
CWE-122 | Medium | 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU140736 - Out-of-bounds read CVE-2026-65969 |
CWE-125 | Medium | 3.0.21.0, 3.1.16.0 | 02.08.2026 |
SB2026080208 |
||
| #VU137383 - Uncontrolled Recursion CVE-2026-59156 |
CWE-674 | Medium | 3.0.20.0, 3.1.15.0 | 13.07.2026 |
SB2026071318 |
||
| #VU137382 - Stack-based buffer overflow CVE-2026-59181 |
CWE-121 | Medium | 3.0.20.0, 3.1.15.0 | 13.07.2026 |
SB2026071318 |
||
| #VU137381 - Out-of-bounds read CVE-2026-59956 |
CWE-125 | Medium | 3.0.20.0, 3.1.15.0 | 13.07.2026 |
SB2026071318 |
||
| #VU137380 - Out-of-bounds read CVE-2026-50291 |
CWE-125 | Medium | 3.0.16.0, 3.1.11.0 | 13.07.2026 |
SB2026071317 |
||
| #VU137379 - Heap-based Buffer Overflow CVE-2024-55194 |
CWE-122 | Low | 3.0.2.0 | 13.07.2026 |
SB2026071316 |
||
| #VU95323 - Out-of-bounds read CVE-2024-40630 |
CWE-125 | Medium | 2.5.14.0 | 05.08.2024 |
SB2024080511 |
||
| #VU79366 - Heap-based Buffer Overflow CVE-2023-3430 |
CWE-122 | High | 2.4.14.0 | 10.08.2023 |
SB2023081028 SB20230821156 SB20230821157 |
||
| #VU79365 - Heap-based Buffer Overflow CVE-2023-36183 |
CWE-122 | High | 2.4.14.0 | 10.08.2023 |
SB2023081028 SB20230821156 SB20230821157 |
||
| #VU74815 - Out-of-bounds read CVE-2022-41649 |
CWE-125 | Low | - | 11.04.2023 |
SB2023041117 SB2023041123 SB2023053007 |
||
| #VU74814 - Out-of-bounds write CVE-2022-41837 |
CWE-787 | High | - | 11.04.2023 |
SB2023041116 SB2023041123 SB2023053007 |
||
| #VU74813 - NULL Pointer Dereference CVE-2022-43603 |
CWE-476 | Low | 2.4.6.0 | 11.04.2023 |
SB2023041115 SB2023041123 SB2023053007 and 1 more |
||
| #VU74812 - Heap-based Buffer Overflow CVE-2022-43602 |
CWE-122 | High | 2.4.6.0 | 11.04.2023 |
SB2023041115 SB2023041123 SB2023053007 |
Showing elements 1 - 20 out of 43