4.8

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-15506

CVE-2025-15506: AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability

A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is named ebdbb75123c9d5f4643e041314e2bc988a13f20d. To fix this issue, it is recommended to deploy a patch. The fix was added to the 2.5.1 milestone.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-15506

CVE-2025-15506:

4.8

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
opencolorio	pip	< 2.5.1	2.5.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an out-of-bounds read within the ConvertToRegularExpression function in the file src/OpenColorIO/FileRules.cpp. The patch ebdbb75123c9d5f4643e041314e2bc988a13f20d clearly shows the fix. The vulnerable code was calling ThrowInvalidRegex with a pointer globPattern + idx that could read past the end of the globPattern buffer. The index idx is calculated based on the globString, which can have a different length than globPattern, leading to the out-of-bounds access. The fix replaces the incorrect pointer calculation with &globString[idx], which correctly points within the globString. Based on the source code, the function is within the OpenColorIO_v1 namespace. Therefore, any runtime profile during exploitation would show OpenColorIO_v1::ConvertToRegularExpression in the stack trace.

Vulnerable functions

OpenColorIO_v1::ConvertToRegularExpression

src/OpenColorIO/FileRules.cpp

The function `ConvertToRegularExpression` is vulnerable to an out-of-bounds read. The original code calculates a pointer `globPattern + idx` which can point outside the allocated memory for `globPattern` if `idx` (derived from `globString`) is larger than the length of `globPattern`. This pointer is then passed to `ThrowInvalidRegex`, causing an out-of-bounds read.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.