How many CVEs does academysoftwarefoundation opencolorio have?

academysoftwarefoundation opencolorio has 2 published CVE records since 2026.

How many academysoftwarefoundation opencolorio CVEs are in CISA KEV?

None of academysoftwarefoundation opencolorio's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for academysoftwarefoundation opencolorio vulnerabilities?

Yes — 2 of academysoftwarefoundation opencolorio's CVEs have a known public exploit.

Which versions of academysoftwarefoundation opencolorio are affected?

54 distinct academysoftwarefoundation opencolorio versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in academysoftwarefoundation opencolorio CVEs?

academysoftwarefoundation opencolorio's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-125 (Out-of-bounds Read).

What is the average severity of academysoftwarefoundation opencolorio CVEs?

The average CVSS base score across academysoftwarefoundation opencolorio's scored CVEs is 6.6.

academysoftwarefoundation opencolorio Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every academysoftwarefoundation opencolorio version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.5.02 CVEs
0.5.101 CVE
0.5.111 CVE
0.5.121 CVE
0.5.131 CVE
0.5.141 CVE
0.5.151 CVE
0.5.161 CVE
0.5.81 CVE
0.5.91 CVE
0.6.01 CVE
0.6.11 CVE
0.7.01 CVE
0.7.11 CVE
0.7.21 CVE
0.7.31 CVE
0.7.41 CVE
0.7.51 CVE
0.7.61 CVE
0.7.71 CVE
0.7.81 CVE
0.7.91 CVE
0.8.01 CVE
0.8.11 CVE
0.8.21 CVE
0.8.31 CVE
0.8.41 CVE
0.8.51 CVE
0.8.61 CVE
1.0.01 CVE
1.0.11 CVE
1.0.21 CVE
1.0.31 CVE
1.0.41 CVE
1.0.51 CVE
1.0.61 CVE
1.0.71 CVE
1.0.81 CVE
1.0.91 CVE
1.1.01 CVE
2.01 CVE
2.0.0-beta11 CVE
2.0.0-beta21 CVE
2.0.0-rc11 CVE
2.11 CVE
2.1.01 CVE
2.21 CVE
2.31 CVE
2.41 CVE
2.5.11 CVE

Version ranges

< 2.5.11 CVE
>= 2.5.21 CVE

Fixed in

2.5.11 CVE
c52966a6677723d5bd2dbef0ccec3fed9cbc37901 CVE

Find a version

2 CVEs

Sort

OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser
CVE-2026-42450
Public exploit
Patch
CWE-120
High · CVSS 8.4
EPSS 0.1% (2th pct)2026-06-24
AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds
CVE-2025-15506
Public exploit
Patch
CWE-125
Medium · CVSS 4.8
EPSS 0.2% (6th pct)2026-01-11

academysoftwarefoundation opencolorio Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Other academysoftwarefoundation products

Frequently asked questions

References

Track academysoftwarefoundation opencolorio vulnerabilities