en
The Academy Software Foundation is a nonprofit-oriented open-source collaboration project operated with the Linux Foundation and focused on software infrastructure for the motion picture, visual effects, animation, and content-creation industries. It provides neutral governance, shared technical infrastructure, and a participation path for a global developer and user community.
As of 10/17/2026, AcademySoftwareFoundation recorded 34 security vulnerabilities in the last 90 days across 2 products, including 13 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, openexr had the most security vulnerabilities in the AcademySoftwareFoundation ecosystem, with 22 vulnerabilities—approximately 64.71% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-65969OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGVCVE-2026-67549OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds writeCVE-2026-63638OpenImageIO: Cineon invalid bit depth heap out-of-bounds writeCVE-2026-63419OpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferCVE-2026-65970OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-65969OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV | Exploitation statusNot exploited | FixYes |
| Published09/18/2026 |
| SeverityMedium |
CVE-2026-67549OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-63638OpenImageIO: Cineon invalid bit depth heap out-of-bounds write | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-63419OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-65970OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines` | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-63635OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-63422OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write | Exploitation statusNot exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-63420OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row` | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-59181OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-59156OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow | Exploitation statusActively exploited | FixYes | Affected productOpenImageIO | Published09/18/2026 | SeverityMedium |
|---|
75 Results | Page 1 of 8