PT-2026-41023 · Unknown+2 · Openimageio+2

Medoedus · CVE-2026-43904 · Published 2026-05-14 · Updated 2026-06-17

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.18.0 OpenImageIO versions prior to 3.1.13.0

Description An issue exists in the toolset used for reading, writing, and manipulating image files for VFX and animation. Specifically, the softimageinput.cpp file fails to clamp the run length to the remaining scanline width before writing pixels in both mixed RLE (Run-Length Encoding, a form of lossless data compression) and pure RLE paths. While the raw packet path uses std::min for clamping, the RLE paths bypass this check. A specially crafted .pic file can trigger a heap overflow of up to 65535 bytes.

Recommendations Update to version 3.0.18.0. Update to version 3.1.13.0.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-43904

GHSA-4499-J545-7Q33

USN-8438-1

Affected Products

Linuxmint

Openimageio

Ubuntu

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43904.json · Exploit
• 🔥 https://github.com/AcademySoftwareFoundation/OpenImageIO/security/advisories/GHSA-4499-j545-7q33 · Exploit
• https://ubuntu.com/security/CVE-2026-43907 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43904 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43904 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43904 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43908 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43909 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8438-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-43904 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43904 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8438-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43906 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43904 · Security Note
• https://ubuntu.com/security/CVE-2026-43903 · Vendor Advisory