Description
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing `openexr_exrcheck_fuzzer`, Valgrind reports a conditional branch depending on uninitialized data inside `generic_unpack`. This indicates a use of uninitialized memory. The issue can result in undefined behavior and/or a potential crash/denial of service. Versions 3.3.6 and 3.4.3 fix the issue.
INFO
Published Date :
2025-11-10T21:23:04.248Z
Last Modified :
2025-11-12T21:05:26.971Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2025-64181 vulnerability.
| Vendors | Products |
|---|---|
| Openexr |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-64181.
