Which versions of OpenSlide are affected by EUVD-2026-82434?

OpenSlide, a core library for digital pathology slide viewing and processing, is affected by a high-severity memory corruption vulnerability (CVE-2026-48977) in its Ventana BIF parser (versions 3.4.1…. A patch is available.

How to fix or mitigate EUVD-2026-82434?

Within 24 hours, inventory all systems using OpenSlide versions 3.4.1 through 4.0.1 that process Ventana .bif files and apply the vendor patch as soon as it is available (patch status: 'Patch available per vendor advisory'); if immediate patching is impossible, block ingestion of untrusted .bif files and isolate affected processes. Within 7 days, upgrade all affected OpenSlide instances to a version beyond 4.0.1 (or the exact fixed version from the vendor advisory) and verify compliance across applications, viewers, and server-side tiling/conversion services; if the patch is not yet released, enforce a temporary moratorium on parsing external .bif files. Within 30 days, audit digital pathology pipelines for residual vulnerable components, test patched systems with malicious sample slides, and implement continuous dependency scanning and sandboxing for any service that must handle third-party slides.

OpenSlide EUVD-2026-82434

Q: What is the CVSS score of EUVD-2026-82434?

EUVD-2026-82434 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

| CVE-2026-48977 HIGH

Write-what-where Condition (CWE-123)

2026-09-17 GitHub_M

RCE Suse Openslide

7.7

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

File-parsing library with no auth of its own, so PR:N and UI:R (victim app opens the crafted slide); AC:H because reliable ACE from a write-what-where needs heap grooming; full C/I/A for potential code execution.

3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

MEDIUM

qualitative

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

POC Analysis Generated

Sep 17, 2026 - 23:27 vuln.today

Analysis Generated

Sep 17, 2026 - 21:34 vuln.today

Patch available

Sep 17, 2026 - 21:19 EUVD

CVE Published

Sep 17, 2026 - 20:26 cve.org

HIGH 7.7

DescriptionCVE.org

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memory offsets and allow arbitrary values to be written at those offsets, affecting all supported platforms and configurations and resulting in a crash or potential arbitrary code execution. This issue is fixed in version 4.0.1.

AnalysisAI

Memory corruption in OpenSlide's Ventana BIF parser (versions 3.4.1 through 4.0.1) allows a crafted whole-slide image to write attacker-chosen values to attacker-chosen memory offsets, crashing the process that opens the slide or potentially achieving arbitrary code execution. Any application, viewer, or server-side tiling/conversion service that uses the affected library to ingest untrusted Ventana .bif files is exposed, since the defect is not configuration-dependent and affects all supported platforms; exploitation requires a user or process to open the malicious file, and reliable code execution (as opposed to a crash) further depends on controlling heap layout. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires a target application or service that uses OpenSlide 3.4.1 through <4.0.1 to open an attacker-supplied Ventana BIF slide file; the specific trigger is a BIF whose Ventana area declares a nonpositive (zero or negative) tiles_across or tiles_down value, parsed by parse_level0_xml() in src/openslide-vendor-ventana.c. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	This is a CWE-123 write-what-where primitive: parse_level0_xml() in src/openslide-vendor-ventana.c accepts nonpositive tile-across/tile-down counts from a crafted Ventana BIF file, yielding attacker-controlled relative offsets and an arbitrary write that can crash the process or, per the description, achieve arbitrary code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patch: 4.0.1 - upgrade OpenSlide to version 4.0.1 or later, which introduces the tiles_across/tiles_down positivity check in parse_level0_xml() (see https://github.com/openslide/openslide/releases/tag/v4.0.1, PR https://github.com/openslide/openslide/pull/751, commit https://github.com/openslide/openslide/commit/2be88bd782d9fff46de8e56a99baca523e7917b3, and advisory https://github.com/openslide/openslide/security/advisories/GHSA-mxg2-48g7-fmwc); after upgrading, rebuild or relink any application that statically bundles OpenSlide, since embedded copies will not pick up the fix automatically. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all systems using OpenSlide versions 3.4.1 through 4.0.1 that process Ventana .bif files and apply the vendor patch as soon as it is available (patch status: 'Patch available per vendor advisory'); if immediate patching is impossible, block ingestion of untrusted .bif files and isolate affected processes. …

Threat intelligence, references, and detailed analysis are available after sign-in.