CVE-2025-48073

Katalog CVE

CVSS 6.2 · Medium EPSS 0,20%

Kerentanan NULL Pointer Dereference pada openexr. Skor CVSS 3.1 6.2 (Medium) menurut NVD.

Deskripsi (NVD)

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. This is fixed in version 3.3.3.

Rincian

Terbit di NVD

31 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.2 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-qhpm-86v7-phmm exploit · advisory vendor
• https://github.com/ShielderSec/poc/tree/main/CVE-2025-48073 exploit