PyPI/openexr CVE-2025-48074: medium 5.5, EPSS 0.27%
OpenEXR Out-Of-Memory via Unbounded File Header Values
Action: Upgrade openexr to 3.3.3 or later.
pip install openexr==3.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.2 | 3.3.3 | - |
Fixed versions
| 3.3.3 |
Sources
- osv: PYSEC-2026-1749
- nvd: CVE-2025-48074
- https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf
- https://github.com/AcademySoftwareFoundation/openexr/commit/2df7802a6421bf39ed73a607392f01b3c6da4e4a
- https://github.com/AcademySoftwareFoundation/openexr
- https://github.com/ShielderSec/poc/tree/main/CVE-2025-48074
- https://pypi.org/project/openexr
- https://github.com/advisories/GHSA-x22w-82jp-8rvf
CVE-2025-48074 · published · modified · JSON