CVE-2026-111130 — OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.in…
Published: 2026-10-15 · CVSS: 6.9 · CVSS 4.0
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts, crashing applications that open it and corrupting tile geometry.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7