CVE-2025-48073 MEDIUM

CVE-2025-48073: OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode

Vendor Academysoftwarefoundation
Product openexr
Weakness CWE-476
Published July 31, 2025
Last update July 31, 2025
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. This is fixed in version 3.3.3.

Key dates

02Disclosure timeline

July 31, 2025 CVE published
July 31, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-33305 Null pointer dereference in Modem CVE-2026-26024 free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  CVE-2024-12656 FabulaTech USB over Network IOCT ftusbbus2.sys 0x220448 null pointer dereference CVE-2021-39852 Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service CVE-2025-30319 InDesign Desktop | NULL Pointer Dereference (CWE-476)