CVE-2026-7582 | AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev DDS Image ddsinput.cpp out-of-bounds write

A vulnerability classified as critical was found in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write.

This vulnerability was named CVE-2026-7582. The attack needs to be approached locally. In addition, an exploit is available.

Applying a patch is advised to resolve this issue.