Buffer Overflow Vulnerability in OpenImageIO Affecting Image Processing Functions

CVE-2026-43905

What is CVE-2026-43905?

The vulnerability arises in OpenImageIO's jpeg2000input.cpp due to inadequate buffer size calculation using signed 32-bit arithmetic. This can lead to a scenario where the resulting buffer size becomes zero or a small value if the computed dimensions exceed INT_MAX. As a result, the resizing of the buffer through m_buf.resize() allocates insufficient memory, creating an opportunity for heap overflow during subsequent pixel write operations. This issue is conditional on the USE_OPENJPH build flag and has been addressed in versions 3.0.18.0 and 3.1.13.0.

References