CVE-2025-64182

Affected versions of the OpenEXR package are vulnerable to a Buffer Overflow due to an integer overflow and unchecked allocation in the legacy Python adapter. The InputFile.channel() and InputFile.channels() methods in PyOpenEXR_old.cpp compute a buffer size as typeSize * width * height without bounds checking, and the return value of the subsequent allocation is never validated before use, leading to a heap overflow on 32-bit systems or a NULL pointer dereference on 64-bit systems. An attacker who supplies a crafted EXR file with an extremely large dataWindow can trigger a crash or potentially achieve arbitrary code execution.