CVE-2025-64181

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.5 OpenEXR versions 3.4.0 through 3.4.2

Description OpenEXR is an image storage format used in the motion picture industry. A flaw exists due to a conditional branch based on uninitialized data within the generic unpack function. This can lead to undefined behavior, potentially causing a crash or denial of service. The issue was discovered while fuzzing with openexr exrcheck fuzzer.

Recommendations Update to OpenEXR version 3.3.6 or later. Update to OpenEXR version 3.4.3 or later.