CVE-2025-48071 Details
Description
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write operation when decompressing ZIPS-packed deep scan-line EXR files with a maliciously forged chunk header. This is fixed in version 3.3.3.
A heap-based buffer overflow vulnerability has been identified in OpenEXR versions 3.3.2 through 3.3.0. The issue arises during the decompression of ZIPS-packed deep scan-line EXR files, where a maliciously crafted chunk header can lead to a buffer overflow in the heap. This vulnerability is caused by the 'undo_zip_impl' function not properly validating the size of uncompressed data before writing it, allowing for exploitation by overwriting memory in an uncontrolled manner.
Users can upgrade to OpenEXR version 3.3.3, which addresses this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 31, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-122 | Heap-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openexr openexr | >= 3.3.0, < 3.3.3 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 13, 2025 | Initial Analysis | [email protected] |
| Jul 31, 2025 | New CVE Received | [email protected] |