OSV-2025-871

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2025-871.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-871
Published
2025-11-03T00:01:55Z
Modified
2026-10-20T17:24:18Z
Summary
UNKNOWN READ in ojph::local::param_cod::~param_cod
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456837230

Crash type: UNKNOWN READ
Crash state:
ojph::local::param_cod::~param_cod
ojph::local::param_cod::~param_cod
ojph::local::param_cod::~param_cod
References

Affected packages

OSS-Fuzz / openexr

Package

Name
openexr
Purl
pkg:generic/openexr

Affected ranges

Type
GIT
Repo
https://github.com/AcademySoftwareFoundation/openexr
Events

Affected versions

v3.*
v3.4.0
v3.4.0-rc
v3.4.0-rc2
v3.4.1
v3.4.1-rc
v3.4.1-rc2
v3.4.10
v3.4.10-rc
v3.4.11
v3.4.11-rc
v3.4.11-rc2
v3.4.11-rc3
v3.4.12
v3.4.12-rc2
v3.4.13
v3.4.13-rc
v3.4.13-rc2
v3.4.13-rc3
v3.4.14
v3.4.14-rc
v3.4.15
v3.4.15-rc
v3.4.16
v3.4.16-rc
v3.4.2
v3.4.2-rc
v3.4.2-rc2
v3.4.3
v3.4.3-rc
v3.4.3-rc2
v3.4.3-rc3
v3.4.4
v3.4.4-rc
v3.4.4-rc2
v3.4.5
v3.4.5-rc
v3.4.6
v3.4.6-rc
v3.4.7
v3.4.7-rc
v3.4.8
v3.4.8-rc
v3.4.9
v3.4.9-rc

Ecosystem specific

{
    "severity":  null
}

Database specific

introduced_range
"da32c659b5ec81526e72a7ad423b153565290433:da818d1550738bf00669af894a9b67bfd8451858"
source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2025-871.yaml"