Opencolorio
Approved changes feed: RSS · Atom
cpe:2.3:a:academysoftwarefoundation:opencolorio:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Academysoftwarefoundation (d8a330db-981e-59dd-9826-571992fc4307) |
|---|---|
| Product | Opencolorio (d603982d-3e66-5284-9ffa-bb923eeb3ad2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-42450 |
vulnerable | 2026-07-29 00:49:31.950633 |
OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser
OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, `FileFormatSpi3D.cpp:163` uses `sscanf` with `%s` into 64-byte stack buffers when parsing LUT data lines. Input comes from `lineBuffer[4096]`, so a crafted .spi3d file can overflow by ~4000 bytes on non-Windows. Version 2.5.2 fixes the issue.
Published: 2026-06-24T13:20:09.025Z
Updated: 2026-06-24T18:56:15.215Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15506 |
vulnerable | 2026-06-08 07:06:36.323270 |
AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds
LOW (3.3)
A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is named ebdbb75123c9d5f4643e041314e2bc988a13f20d. To fix this issue, it is recommended to deploy a patch. The fix was added to the 2.5.1 milestone.
Published: 2026-01-11T11:02:09.187Z
Updated: 2026-02-23T08:31:01.015Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.