oiio v3.1.17.0

Reading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.

Release notes

Release 3.1.17.0 (Sep 1, 2026) -- compared to 3.1.16.0
---------------------------------------------------------
  - *raw*: Add `raw:thumbnail_index` and `raw:thumbnail_sort` hints to select a specific embedded thumbnail, plus assorted thumbnail fixes and unit tests. [#5334](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5334) (by @antond-weta / Anton Dukhovnikov)
  - *raw*: Allow vector types in multi-value hints (white balance as a float4, cropbox/greybox as int2 boxes). [#5386](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5386) (by @antond-weta / Anton Dukhovnikov)
  - *raw*: Fix undebayered flip mapping, buffer bounds, and overflow issues. [#5415](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5415)
  - *exr*: Convert mixed-native-integer-depth channels through proper rescaling instead of reinterpreting bytes when writing OpenEXR (also fixes `copy_image` and `iconvert` native fast paths). [#5340](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5340) (by @lgritz / Larry Gritz)
  - *oiiotool*: More robust handling of failed reads: preserve the reader's specific error message instead of a generic "file not found", don't dereference specs of a failed read, and safer error message marshalling. [#5380](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5380) [#5377](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5377) [#5401](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5401) (by @lgritz / Larry Gritz)
  - *IBA*: Detect iterator read errors in orientation functions (flip, flop, rotate90/180/270, transpose). [#5355](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5355) (by @luna-y-kim / Luna Kim)
  - *writers*: Don't write `thumbnail_*` metadata to formats that can't hold a thumbnail. [#5357](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5357) (by @jinhgkim / Jinnie Kim)
  - *readers*: Use `check_open()` and `check_compression_ratio()` in all readers that lacked them, guarding against decompression bombs and implausible header dimensions. [#5342](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5342) (by @lgritz / Larry Gritz)
  - *bmp*: Decompression-bomb guard, UB-safe height negation, and scanline bounds checks. [#5371](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5371) (by @lgritz / Larry Gritz)
  - *exif*: Harden the shared Exif decoder against malformed input (affects all formats that embed Exif). [#5399](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5399) (by @lgritz / Larry Gritz)
  - *ffmpeg*: Fix heap bounds, bad packet handling, add checks at open, and other fixes. [#5406](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5406) (by @lgritz / Larry Gritz)
  - *fits*: Validate the NAXIS count against the permitted 0-999 range. [#5370](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5370) (by @lgritz / Larry Gritz)
  - *gif*: Reject a short graphics-control extension block. [#5366](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5366) (by @lgritz / Larry Gritz)
  - *icc*: Fix out-of-bounds pointer formation, use alignment-safe reads, and 64-bit tag bounds in the shared ICC profile decoder (jpeg, png, tiff, webp, jpeg2000, psd). [#5417](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5417) (by @lgritz / Larry Gritz)
  - *jpeg*: More detection of corrupt files. [#5376](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5376) (by @lgritz / Larry Gritz)
  - *jpegxl*: Harden against corrupt input. [#5378](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5378) (by @lgritz / Larry Gritz)
  - *pnm*: Use 64-bit scanline math to avoid integer overflow. [#5344](https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/5344) (by @lgritz / Larry Gritz)
  - *psd*: Harden reader against oversized/bomb headers and ZIP-layer buffer overflow. [#5348](https://githu…

Share this resource