Product:
OpenEXR
Summary
When decoding an OpenEXR file that uses DWAA or DWAB compression, there is an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy loops will continue to write until the next multiple of 8. This can lead to buffer overflows and corruption of following heap memory.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2025-59732 |
Exploitation
To exploit this vulnerability, an attacker can create a specially crafted OpenEXR file with dimensions that are not divisible by 8. When this file is processed, the decoding function will write beyond the allocated buffer, potentially allowing the attacker to corrupt memory and execute arbitrary code.
Affected Products
- OpenEXR: A high dynamic range image file format used in visual effects and animation.
Mitigation
It is recommended to upgrade to version 8.0 or beyond to mitigate this vulnerability. This update addresses the buffer overflow issue by ensuring that the height and width of the image are properly validated before processing.