What’s Vulnerable › Products

AcademySoftwareFoundation OpenColorIO vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your AcademySoftwareFoundation OpenColorIO version is affected

Latest AcademySoftwareFoundation OpenColorIO vulnerabilities

• CVE-2026-42450 — OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser (CVSS 8.4)
• CVE-2025-15506 — AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds (CVSS 3.3)