Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-48073

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. This is fixed in version 3.3.3.

Published

2025-07-31T21:15:28.340

Last Modified

2025-08-13T19:06:51.723

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.2 (MEDIUM)

Weaknesses

Type: Primary
CWE-476

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	openexr	openexr	3.3.2	Yes

References

https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-qhpm-86v7-phmm Exploit, Vendor Advisory ([email protected])
https://github.com/ShielderSec/poc/tree/main/CVE-2025-48073 Exploit ([email protected])