A medium severity vulnerability (CVE-2026-7582) exists in AcademySoftwareFoundation OpenImageIO up to version 3.2.0.1-dev. The flaw is an out-of-bounds write in the DDS Image Handler component, specifically in the src/dds.imageio/ddsinput.cpp file. Exploitation requires local access and privileges. Public exploit code is available. A patch identified by commit 94ec2deec3e3bf2f2e2ff84d008e27425d626fe2 is available and should be applied to remediate the issue.