VULNERABILITY INTELLIGENCE
CVE-2025-48071
CVSS score7.8 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-07-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write operation when decompressing ZIPS-packed deep scan-line EXR files with a maliciously forged chunk header. This is fixed in version 3.3.3.
Weakness classification
- security-advisories@github.com: CWE-122
Primary references
- security-advisories@github.com — Patch
- security-advisories@github.com — Release Notes
- security-advisories@github.com — Exploit, Vendor Advisory