CVE-2025-48073: OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode

July 31, 2025 (updated November 10, 2025)

When reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation.

References

github.com/AcademySoftwareFoundation/openexr
github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-qhpm-86v7-phmm
github.com/ShielderSec/poc/tree/main/CVE-2025-48073
github.com/advisories/GHSA-qhpm-86v7-phmm
nvd.nist.gov/vuln/detail/CVE-2025-48073

Code Behaviors & Features

Detect and mitigate CVE-2025-48073 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →