CVE-2025-59732: Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8.
If the height or width of the image is not divisible by 8, the copy loops at [0] and [1] will continue to write until the next multiple of 8.
The buffer td->uncompresseddata is allocated in decodeblock based on the precise height and width of the image, so the "rounded-up" multiple of 8 in the copy loop can exceed the buffer bounds, and the write block starting at [2] can corrupt following heap memory.
We recommend upgrading to version 8.0 or beyond.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59732?
CVE-2025-59732 has been classified as a critical vulnerability due to the potential for arbitrary memory writes.
How do I fix CVE-2025-59732?
To fix CVE-2025-59732, update your FFmpeg software to version 8.0 or later to ensure proper handling of dimensions in OpenEXR files.
What software is affected by CVE-2025-59732?
CVE-2025-59732 affects FFmpeg versions prior to 8.0 that handle OpenEXR files with DWAA or DWAB compression.
What impact does CVE-2025-59732 have on applications?
CVE-2025-59732 can lead to application crashes or potentially allow for remote code execution due to improper memory handling.
Is CVE-2025-59732 actively being exploited?
As of now, there are no specific reports indicating active exploitation of CVE-2025-59732, but it is advised to patch the vulnerability promptly.