ByteOS Network

NVD Vulnerability Details :

CVE-2025-48074

Analyzed

Source-security-advisories@github.com

Published At-01 Aug, 2025 | 17:15

Updated At-13 Aug, 2025 | 19:18

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance degradation when processing malicious files. This is fixed in version 3.3.3.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	4.6	MEDIUM	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CPE Matches

openexr>>openexr>>3.3.2

cpe:2.3:a:openexr:openexr:3.3.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-770	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf	security-advisories@github.com	Exploit Vendor Advisory
https://github.com/ShielderSec/poc/tree/main/CVE-2025-48074	security-advisories@github.com	Exploit

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History