Buffer Overflow Vulnerability in OpenEXR by Google

CVE-2025-59732

What is CVE-2025-59732?

A vulnerability exists in Google’s OpenEXR when processing images with DWAA or DWAB compression. This issue arises from an assumption that the dimensions of the image, specifically height and width, are divisible by 8. If this condition is not met, the decoding process enters copy loops that continue to write beyond the allocated buffer size, leading to heap memory corruption. This flaw emphasizes the importance of validating image dimensions before processing. Upgrading to OpenEXR version 8.0 or later is recommended to mitigate this risk.

References