CVE-2025-15506 | AcademySoftwareFoundation OpenColorIO up to 2.5.0 FileRules.cpp ConvertToRegularExpression out-of-bounds (Issue 2228)

January 10, 2026 Yanac

A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. It has been classified as problematic. This issue affects the function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation results in out-of-bounds read.

This vulnerability was named CVE-2025-15506. The attack needs to be approached locally. In addition, an exploit is available.

To fix this issue, it is recommended to deploy a patch.

The fix was added to the 2.5.1 milestone.VulDB Recent EntriesRead More