CVE-2025-48073 OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode

What is CVE-2025-48073?

CVE-2025-48073 is a medium-severity vulnerability in Openexr Openexr, published on 31 Jul 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. This is fixed in version 3.3.3.

Weakness: CWE-476

Which versions are affected by CVE-2025-48073?

3 open source packages ship an affected version, including openexr and OpenEXR. It affects 1 product.

Products include Openexr Openexr.

How do I fix CVE-2025-48073?

Upgrade openexr to 3.3.3 or later.

Is CVE-2025-48073 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-48073 exists.

Other vulnerabilities in Openexr Openexr

• CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing Critical 9.1
• CVE-2026-41142 OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API High 8.8
• CVE-2026-42216 OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion High 8.8
• CVE-2017-9111 OpenEXR invalid write High 8.8
• CVE-2017-9113 Memory corruption in n/a High 8.8

All Openexr Openexr vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qhpm-86v7-phmm, PYSEC-2026-1748.