PT-2025-31588

CVE-2025-48073

Published

2025-07-31

Updated

2026-07-07

Description by

CVSS 3.1

6.2

Medium

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.2

Description OpenEXR is an image storage format used in the motion picture industry. A NULL pointer dereference can occur in a write operation when reading a deep scanline image with a large sample count in reduceMemory mode in version 3.3.2, potentially causing a target application to crash.

Recommendations Update to version 3.3.3 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products