Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.2%top 91%

CVE-2026-43906: CWE-122: Heap-based Buffer Overflow in AcademySoftwareFoundation OpenImageIO

0
High
VulnerabilityCVE-2026-43906cvecve-2026-43906cwe-122
Published: 05/14/2026 (05/14/2026, 18:54:17 UTC)
Source: CVE Database V5
Vendor/Project: AcademySoftwareFoundation
Product: OpenImageIO

Description

A heap-based buffer overflow vulnerability exists in the HEIF decoder of AcademySoftwareFoundation's OpenImageIO prior to versions 3.0.18.0 and 3.1.13.0. This flaw allows out-of-bounds writes triggered by crafted images with subimage metadata mismatches, potentially causing memory corruption and enabling code execution. The vulnerability is addressed in OpenImageIO versions 3.0.

CVSS v4.0

Score 8.5high

Attack Vector
Local
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
Passive
Vuln. Confidentiality
High
Vuln. Integrity
High
Vuln. Availability
High
Subsq. Confidentiality
None
Subsq. Integrity
None
Subsq. Availability
None
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected software

GitHub Actionsmore threats →ai
academysoftwarefoundation/OpenImageIO
pkg:github/academysoftwarefoundation/OpenImageIO
Affected versions
<3.0.18.0

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 05/22/2026, 15:36:53 UTC

Technical Analysis

CVE-2026-43906 is a heap-based buffer overflow vulnerability (CWE-122) in the HEIF image decoder component of OpenImageIO, a toolset for handling image files in VFX and animation workflows. Versions before 3.0.18.0 and between 3.1.4.0-beta and 3.1.13.0 are affected. The vulnerability arises from improper handling of subimage metadata, allowing crafted HEIF images to cause out-of-bounds writes on the heap. This can lead to memory corruption and potentially arbitrary code execution. The issue is fixed in OpenImageIO versions 3.0.18.0 and 3.1.13.0.

Potential Impact

Successful exploitation can result in memory corruption and potentially arbitrary code execution when processing malicious HEIF images. The CVSS 4.0 base score is 8.5 (high severity), reflecting the local attack vector with low complexity, no privileges required, and user interaction needed. The vulnerability affects confidentiality, integrity, and availability with high impact.

Mitigation Recommendations

A fix is available in OpenImageIO versions 3.0.18.0 and 3.1.13.0. Users should upgrade to these or later versions to remediate this vulnerability. No vendor advisory content contradicts this; therefore, upgrading is the recommended mitigation.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
GitHub_M
Date Reserved
2026-05-04T16:11:33.086Z
Cvss Version
4.0
State
PUBLISHED
Remediation Level
null

Threat ID: 6a062489ec166c07b00b4bd9

Added to database: 05/14/2026, 19:37:45 UTC

Last enriched: 05/22/2026, 15:36:53 UTC

Last updated: 07/31/2026, 19:22:59 UTC

Views: 64

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses