CVE-2026-50291

Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.16.0 OpenImageIO versions prior to 3.1.11.0

Description Processing a specially crafted BMP file through oiiotool or an application linked to OpenImageIO can trigger an issue in the BMP palette handling within src/bmp.imageio/bmpinput.cpp when an empty color table is present. The function BmpInput::read native scanline() performs an invalid palette read while decoding an RLE-compressed scanline, leading to a process crash and denial of service.

Recommendations Update to version 3.0.16.0. Update to version 3.1.11.0.