CVE-2025-48072

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.3.3

Description OpenEXR, an image storage format used in the motion picture industry, contains a flaw. A heap-based buffer overflow can occur during a read operation when decompressing DWAA-packed scan-line EXR files with a maliciously forged chunk. The issue is due to bad pointer math.

Recommendations Update to version 3.3.3 or later.