Known vulnerabilities in OpenImageIO
Vendor:
Fedoraproject
Software:
OpenImageIO
Software CPE:
cpe:2.3:o:fedoraproject:openimageio:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
16
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135831 - Reachable Assertion CVE-2026-62377 |
CWE-617 | Low | 3.2.1.1-2.fc46 | 29.06.2026 |
SB2026062684 SB2026081955 SB2026092303 and 3 more |
||
| #VU135517 - Out-of-bounds write CVE-2026-62291 |
CWE-787 | Medium | 3.2.1.1-2.fc46 | 26.06.2026 |
SB2026062684 SB2026081955 SB2026082723 and 4 more |
||
| #VU135516 - Out-of-bounds read CVE-2026-62292 |
CWE-125 | Medium | 3.2.1.1-2.fc46 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 4 more |
||
| #VU135515 - Integer underflow CVE-2026-62289 |
CWE-191 | Low | 3.2.1.1-2.fc46 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 6 more |
||
| #VU135511 - Allocation of Resources Without Limits or Throttling CVE-2026-50142 |
CWE-770 | Medium | 3.2.1.1-2.fc46 | 26.06.2026 |
SB2026062683 SB2026072474 SB2026092303 and 2 more |
||
| #VU79682 - NULL Pointer Dereference CVE-2021-41689 |
CWE-476 | Medium | 2.3.18.0-2.fc37 | 18.08.2023 |
SB2022062403 SB2023081826 SB2023081827 and 1 more |
||
| #VU79681 - Missing release of memory after effective lifetime CVE-2021-41690 |
CWE-401 | Medium | 2.3.18.0-2.fc37 | 18.08.2023 |
SB2022062403 SB2023081826 SB2023081827 and 1 more |
||
| #VU79680 - Double Free CVE-2021-41688 |
CWE-415 | Medium | 2.3.18.0-2.fc37 | 18.08.2023 |
SB2022062403 SB2023081826 SB2023081827 and 1 more |
||
| #VU79679 - Missing release of memory after effective lifetime CVE-2021-41687 |
CWE-401 | Medium | 2.3.18.0-2.fc37 | 18.08.2023 |
SB2022062403 SB2023081826 SB2023081827 and 1 more |
||
| #VU79366 - Heap-based Buffer Overflow CVE-2023-3430 |
CWE-122 | High | 2.4.14.0-1.fc37, 2.4.14.0-1.fc38 | 10.08.2023 |
SB2023081028 SB20230821156 SB20230821157 |
||
| #VU79365 - Heap-based Buffer Overflow CVE-2023-36183 |
CWE-122 | High | 2.4.14.0-1.fc37, 2.4.14.0-1.fc38 | 10.08.2023 |
SB2023081028 SB20230821156 SB20230821157 |
||
| #VU74813 - NULL Pointer Dereference CVE-2022-43603 |
CWE-476 | Low | 2.4.6.1-1.fc37 | 11.04.2023 |
SB2023041115 SB2023041123 SB2023053007 and 1 more |
||
| #VU74799 - Stack-based buffer overflow CVE-2022-41981 |
CWE-121 | High | 2.4.6.1-1.fc37 | 11.04.2023 |
SB2023041112 SB2023041123 SB2023053007 and 1 more |
||
| #VU74390 - Out-of-bounds read CVE-2023-22845 |
CWE-125 | Medium | 2.4.8.1-1.el9, 2.4.8.1-1.fc37 | 04.04.2023 |
SB2023040439 SB20230816178 SB20230816179 |
||
| #VU74384 - Uncontrolled Recursion CVE-2023-24472 |
CWE-674 | Medium | 2.4.8.1-1.el9, 2.4.8.1-1.fc37 | 04.04.2023 |
SB2023040439 SB20230816178 SB20230816179 |
||
| #VU74381 - Out-of-bounds read CVE-2023-24473 |
CWE-125 | Medium | 2.4.8.1-1.el9, 2.4.8.1-1.fc37 | 04.04.2023 |
SB2023040439 SB20230816178 SB20230816179 |