CyberSecBulletin

Academy Software Foundation vulnerabilities

We track 4 vulnerabilities in Academy Software Foundation products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 23, 2025.

4vulnerabilities
1critical
3high
0exploited
8.1average CVSS score

Latest Academy Software Foundation vulnerabilities

  • 7.8 High severity

    OpenEXR: Heap-based Buffer Overflow

    CVE-2025-12840Academy Software Foundation

    Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User int

  • 7.8 High severity

    OpenEXR: Heap-based Buffer Overflow

    CVE-2025-12839Academy Software Foundation

    Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User int

  • 7.8 High severity

    OpenEXR: Heap-based Buffer Overflow

    CVE-2025-12495Academy Software Foundation

    Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User int

  • 9.1 Critical severity

    OpenEXR: Out-of-bounds Write

    CVE-2023-5841Academy Software FoundationEPSS 1.25%

    Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This i