Heap Based Buffer Overflow

🗓️ 20 May 2025 06:34:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 1 Views

OpenEXR heap overflow in decompress of forged dwaa scanline EXR chunks, memory corruption risk.

Reporter	Title	Published	Views	Family All 23
AlpineLinux	CVE-2025-48072	31 Jul 202520:18	–	alpinelinux
Circl	CVE-2025-48072	31 Jul 202515:09	–	circl
CNNVD	OpenEXR 缓冲区错误漏洞	31 Jul 202500:00	–	cnnvd
CNVD	OpenEXR Buffer Overflow Vulnerability (CNVD-2025-24798)	11 Aug 202500:00	–	cnvd
CVE	CVE-2025-48072	31 Jul 202520:18	–	cve
Cvelist	CVE-2025-48072 OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap	31 Jul 202520:18	–	cvelist
Debian CVE	CVE-2025-48072	31 Jul 202520:18	–	debiancve
EUVD	EUVD-2025-23315	3 Oct 202520:07	–	euvd
Github Security Blog	OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute	31 Jul 202519:20	–	github
NVD	CVE-2025-48072	31 Jul 202521:15	–	nvd

Vulners

Node

openexr openexrMatch3.1.5-r4python

AND

openexr openexrMatch3.1.7-r1python

AND

openexr openexrMatch3.1.2-r0python

AND

openexr openexrMatch3.1.5-r3python

AND

openexr openexrMatch2.4.1-r1python

AND

openexr openexrMatch3.1.6-r1python

AND

openexr openexrMatch3.1.5-r6python

AND

openexr openexrMatch3.1.9-r0python

AND

openexr openexrMatch3.1.7-r0python

AND

openexr openexrMatch3.1.3-r0python

AND

openexr openexrMatch3.1.5-r5python

AND

openexr openexrMatch2.5.5-r0python

AND

openexr openexrMatch3.1.10-r0python

AND

openexr openexrMatch3.1.13-r0python

AND

openexr openexrMatch3.1.4-r0python

AND

openexr openexrMatch3.1.7-r2python

AND

openexr openexrMatch3.1.5-r0python

AND

openexr openexrMatch3.1.13-r1python

AND

openexr openexrMatch3.1.1-r0python

AND

openexr openexrMatch3.1.5-r1python

AND

openexr openexrMatch2.5.5-r1python

AND

openexr openexrMatch2.4.1-r2python

AND

openexr openexrMatch3.1.11-r0python

AND

openexr openexrMatch3.3.2-r0python

AND

openexr openexrMatch2.5.5-r2python

AND

openexr openexrMatch3.1.12-r0python

AND

openexr openexrMatch3.1.13-r2python

AND

openexr openexrMatch3.1.8-r0python

AND

openexr openexrMatch2.5.5-r3python

AND

openexr openexrMatch3.1.5-r2python

AND

alpinelinux alpine_linuxMatchedge

openexr openexrMatch3.3.2python

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48072
github	www.github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-4r7w-q3jg-ff43
github	www.github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.3
github	www.github.com/AcademySoftwareFoundation/openexr/commit/2d09449427b13a05f7c31a98ab2c4347c23db361
github	www.github.com/ShielderSec/poc/tree/main/CVE-2025-48072
github	www.github.com/AcademySoftwareFoundation/openexr

13 Dec 2025 07:29Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.1

CVSS 46.8

EPSS0.00459

SSVC