Denial Of Service (DoS)

🗓️ 18 Aug 2025 08:34:48Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 1 Views

OpenEXR DoS from unvalidated dataWindow size in file headers causes memory use and slowdown.

Reporter	Title	Published	Views	Family All 28
AlpineLinux	CVE-2025-48074	1 Aug 202516:32	–	alpinelinux
Circl	CVE-2025-48074	31 Jul 202515:11	–	circl
CNNVD	OpenEXR 安全漏洞	1 Aug 202500:00	–	cnnvd
CNVD	OpenEXR has an unspecified vulnerability (CNVD-2025-24796)	11 Aug 202500:00	–	cnvd
CVE	CVE-2025-48074	1 Aug 202516:32	–	cve
Cvelist	CVE-2025-48074 OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors	1 Aug 202516:32	–	cvelist
Debian CVE	CVE-2025-48074	1 Aug 202516:32	–	debiancve
EUVD	EUVD-2025-23375	3 Oct 202520:07	–	euvd
Github Security Blog	OpenEXR Out-Of-Memory via Unbounded File Header Values	31 Jul 202519:23	–	github
NVD	CVE-2025-48074	1 Aug 202517:15	–	nvd

Vulners

Node

openexr openexrMatch2.5.5-r2python

AND

openexr openexrMatch3.1.13-r1python

AND

openexr openexrMatch3.1.11-r0python

AND

openexr openexrMatch3.1.3-r0python

AND

openexr openexrMatch3.1.5-r2python

AND

openexr openexrMatch3.1.5-r4python

AND

openexr openexrMatch3.1.9-r0python

AND

openexr openexrMatch3.1.5-r6python

AND

openexr openexrMatch3.1.1-r0python

AND

openexr openexrMatch3.1.4-r0python

AND

openexr openexrMatch3.1.5-r3python

AND

openexr openexrMatch2.5.5-r0python

AND

openexr openexrMatch3.1.6-r1python

AND

openexr openexrMatch3.1.13-r2python

AND

openexr openexrMatch3.1.7-r1python

AND

openexr openexrMatch3.1.5-r5python

AND

openexr openexrMatch2.5.5-r3python

AND

openexr openexrMatch3.1.10-r0python

AND

openexr openexrMatch3.1.8-r0python

AND

openexr openexrMatch2.5.5-r1python

AND

openexr openexrMatch3.3.2-r0python

AND

openexr openexrMatch2.4.1-r2python

AND

openexr openexrMatch3.1.12-r0python

AND

openexr openexrMatch2.4.1-r1python

AND

openexr openexrMatch3.1.7-r0python

AND

openexr openexrMatch3.1.5-r1python

AND

openexr openexrMatch3.1.5-r0python

AND

openexr openexrMatch3.1.13-r0python

AND

openexr openexrMatch3.1.2-r0python

AND

openexr openexrMatch3.1.7-r2python

AND

alpinelinux alpine_linuxMatchedge

openexr openexrMatch3.3.2python

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48074
github	www.github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf
github	www.github.com/ShielderSec/poc/tree/main/CVE-2025-48074
github	www.github.com/AcademySoftwareFoundation/openexr

13 Dec 2025 08:03Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5

CVSS 44.6

EPSS0.00133

SSVC