PT-2025-31589

CVE-2025-48074

Published

2025-07-31

Updated

2026-09-02

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.3.3

Description OpenEXR is an image storage format used in the motion picture industry. Versions prior to 3.3.3 trust unvalidated dataWindow size values from file headers, potentially leading to excessive memory allocation and performance degradation when processing malicious files.

Recommendations Update to version 3.3.3 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products