CVE-2026-42450 - OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser
CVE ID :CVE-2026-42450 Published : June 24, 2026, 1:20 p.m. | 5 hours, 50 minutes ago Description :OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, `FileFormatSpi3D.cpp:163` uses `sscanf` with `%s` into 64-byte stack buffers when parsing...