https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:07:57 +0000 https://vulnerability.circl.lu/vuln/cve-2025-59732 <p><strong>Affected:</strong> FFmpeg</p> <p>When decoding an OpenEXR file that uses DWAA or DWAB compression, there&#39;s an implicit assumption that the height and width are divisible by 8.</p> <p>If the height or width of the image is not divisible by 8, the copy loops at [0] and [1] will continue to write until the next multiple of 8.</p> <p>The buffer td-&gt;uncompressed_data is allocated in decode_block based on the precise height and width of the image, so the &#34;rounded-up&#34; multiple of 8 in the copy loop can exceed the buffer bounds, and the write block starting at [2] can corrupt following heap memory.</p> <p>We recommend upgrading to version 8.0 or beyond.</p> <p><strong>Affected:</strong> FFmpeg</p> <p>When decoding an OpenEXR file that uses DWAA or DWAB compression, there&#39;s an implicit assumption that the height and width are divisible by 8.</p> <p>If the height or width of the image is not divisible by 8, the copy loops at [0] and [1] will continue to write until the next multiple of 8.</p> <p>The buffer td-&gt;uncompressed_data is allocated in decode_block based on the precise height and width of the image, so the &#34;rounded-up&#34; multiple of 8 in the copy loop can exceed the buffer bounds, and the write block starting at [2] can corrupt following heap memory.</p> <p>We recommend upgrading to version 8.0 or beyond.</p> https://vulnerability.circl.lu/vuln/cve-2025-59732