OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()

Summary A memory safety bug in the legacy OpenEXR Python adapter the deprecated OpenEXR.InputFile wrapper allow crashes and likely code execution when opening attacker-controlled EXR files or when passing crafted Python objects. Integer overflow and unchecked allocation in InputFile.channel and...

CVE-2025-64182

CVE-2025-64182 affects the OpenEXR Python legacy adapter (OpenEXR.InputFile) in multiple OpenEXR releases. The root cause is a memory-safety bug from integer overflow and unchecked allocation in InputFile.channel() and InputFile.channels(), leading to heap overflow (32‑bit) or NULL dereference (6...