Expired pointer dereference in oiio - CVE-2026-65970
Published: August 2, 2026
Vulnerability identifier: #VU140738
CSH Severity: Medium
CVSS v4 BT: 1.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2026-65970
CWE-ID: CWE-825
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to expired pointer dereference in TIFFInput::read_native_scanlines when processing a crafted ZIP-compressed TIFF during multithreaded scanline reads. A remote attacker can supply a specially crafted TIFF file to cause a denial of service.
User interaction is required to open or process the crafted TIFF, and the crash requires pixel read or bulk scanline processing with TIFF multithreading enabled.
Affected software
oiio
How to mitigate CVE-2026-65970
Install security update from vendor's website.
oiio - update to 3.1.16.0