CVE-2025-48073: OpenEXR Package Experiences NULL Pointer Write in 'reduceMemory' Mode
Summary
CVE-2025-48073: OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode. Affects openexr versions >= 3.3.2, < 3.3.3. Fixed in 3.3.3. How to fix ↓
Also tracked for
- openexr · Debian:11
The same CVE-2025-48073 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenEXR is an open-source high dynamic range image file format developed by Industrial Light & Magic (ILM). It is widely used in visual effects and computer graphics for its ability to store complex image data efficiently. The package provides various features for image processing, including support for deep images and multiple channels. However, it is susceptible to a vulnerability that can lead to application crashes under specific conditions.
Vulnerability Detail
The vulnerability arises in the ScanLineProcess::run_fill function within the OpenEXR library. When reading a deep scanline image with a large sample count in 'reduceMemory' mode, the application may attempt to write to a NULL pointer due to the sample buffer not being allocated. This can lead to a denial of service by crashing the application, as the code does not properly handle the allocation of memory for the sample buffer when the sample data is not read.
How To Fix
Minimum fixed version
3.3.3
This is the first release that contains the fix.
pip install --upgrade "openexr==3.3.3"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using 'reduceMemory' mode when processing deep scanline images with large sample counts. This can prevent the application from crashing while a permanent fix is being implemented.
Conclusion
The CVE-2025-48073 vulnerability in the OpenEXR package poses a risk of application crashes due to a NULL pointer dereference in 'reduceMemory' mode. Users are advised to update to the latest version to mitigate this risk. Temporary workarounds are available, but a permanent fix through updates is the best course of action.
See every vulnerability recorded for openexr →
FAQ
CVE-2025-48073 is a vulnerability in the OpenEXR package that can cause a NULL pointer dereference and crash the application when processing deep scanline images in 'reduceMemory' mode.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The primary consequence is a denial of service, where the application may crash unexpectedly, impacting any workflows that rely on OpenEXR for image processing.
Yes, a patch is available in version 3.3.3 of the OpenEXR package. It is recommended to update to this version or later.
If you cannot update the package immediately, avoid using 'reduceMemory' mode when processing images with large sample counts to mitigate the risk of crashing.
Related vulnerabilities
Recent vulnerabilities recorded for openexr.
