CVE-2025-12495

A flaw was found in OpenEXR, a library for handling High Dynamic Range (HDR) image files. This heap-based buffer overflow vulnerability allows a remote attacker to execute arbitrary code on a user's system. This occurs when a user is tricked into opening a specially crafted EXR file, exploiting a weakness in how the software processes image data. Successful exploitation could lead to complete control over the affected system.

This vulnerability is rated Important for Red Hat as it allows remote code execution when a user opens a specially crafted EXR file.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should exercise caution and avoid opening untrusted EXR files. As exploitation requires user interaction with a malicious file, preventing the opening of such files will prevent exploitation.