A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is named ebdbb75123c9d5f4643e041314e2bc988a13f20d. To fix this issue, it is recommended to deploy a patch. The fix was added to the 2.5.1 milestone.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the
    function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation
    results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public
    and could be used. The patch is named ebdbb75123c9d5f4643e041314e2bc988a13f20d. To fix this issue, it is
    recommended to deploy a patch. The fix was added to the 2.5.1 milestone. (CVE-2025-15506)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the     function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation     results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public     and could be used. The patch is named ebdbb75123c9d5f4643e041314e2bc988a13f20d. To fix this issue, it is     recommended to deploy a patch. The fix was added to the 2.5.1 milestone. (CVE-2025-15506)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
436729	SCA: security update for opencolorio (GHSA-m86r-wr74-693h)	Tenable Cloud Security	SCA Checks	Local	medium
436729	SCA: security update for opencolorio (GHSA-m86r-wr74-693h)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
282574	Linux Distros Unpatched Vulnerability : CVE-2025-15506	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2025-15506

medium

Tenable Plugins

medium

medium

medium