PyPI/openexr CVE-2025-48073: medium 6.2, EPSS 0.21%
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
Action: Upgrade openexr to 3.3.3 or later.
pip install openexr==3.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.2 | 3.3.3 | - |
Fixed versions
| 3.3.3 |
Sources
- osv: GHSA-qhpm-86v7-phmm
- nvd: CVE-2025-48073
- https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-qhpm-86v7-phmm
- https://github.com/AcademySoftwareFoundation/openexr
- https://github.com/ShielderSec/poc/tree/main/CVE-2025-48073
CVE-2025-48073 · published · modified · JSON