CVE-2026-111130: OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts, crashing applications that open it and corrupting tile geometry.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to trigger the issue?
The attacker must provide a crafted MIRAX slide with Slidedat.ini values where CameraImageDivisionsPerSide does not evenly divide the image counts, and induce an application to open that slide. The CVSS vector indicates local access and user interaction are required, while no privileges are required.
Which deployments are most exposed?
Applications that open MIRAX slides from untrusted or attacker-controlled sources are the relevant exposure point. Successful triggering can crash the application and produce incorrect tile geometry.