Skip to content
Sign in
2.0 Low

CVE-2025-64181 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…

Description

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing `openexr_exrcheck_fuzzer`, Valgrind reports a conditional branch depending on uninitialized data inside `generic_unpack`. This indicates a use of uninitialized memory. The issue can result in undefined behavior and/or a potential crash/denial of service. Versions 3.3.6 and 3.4.3 fix the issue.

Affected products and versions

Product Affected versions Fixed in
openexr 3.4 3.4.0 → < 3.4.3 3.4.3
openexr 3.3 3.3.0 → < 3.3.6 3.3.6

Other CVEs of openexr

The 47 CVEs of openexr →
CVE-2026-59981 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 7.1 High CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 5.5 Medium CVE-2026-68515 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 High CVE-2026-68513 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 High
Track this CVE