CVE-2025-64183 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-64183 Interim 1 1 2025-12-23T00:15:43Z current 2025-12-23T00:15:43Z 2025-12-23T00:15:43Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-64183 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObject_StealAttrString of pyOpenEXR_old.cpp. The legacy adapter defines PyObject_StealAttrString that calls PyObject_GetAttrString to obtain a new reference, immediately decrefs it, and returns the pointer. Callers then pass this dangling pointer to APIs like PyLong_AsLong/PyFloat_AsDouble, resulting in a use-after-free. This is invoked in multiple places (e.g., reading PixelType.v, Box2i, V2f, etc.) Versions 3.2.5, 3.3.6, and 3.4.3 fix the issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 openSUSE Leap 15.6 openSUSE Tumbleweed OpenEXR libIex-3_4-33-3.4.3-1.1 libIex-3_4-33-32bit-3.4.3-1.1 libIex-3_4-33-x86-64-v3-3.4.3-1.1 libIlmImf-2_2-23 libIlmImf-2_2-23-32bit libIlmImf-Imf_2_1-21 libIlmImfUtil-2_2-23 libIlmImfUtil-2_2-23-32bit libIlmThread-3_4-33-3.4.3-1.1 libIlmThread-3_4-33-32bit-3.4.3-1.1 libIlmThread-3_4-33-x86-64-v3-3.4.3-1.1 libOpenEXR-3_4-33-3.4.3-1.1 libOpenEXR-3_4-33-32bit-3.4.3-1.1 libOpenEXR-3_4-33-x86-64-v3-3.4.3-1.1 libOpenEXRCore-3_4-33-3.4.3-1.1 libOpenEXRCore-3_4-33-32bit-3.4.3-1.1 libOpenEXRCore-3_4-33-x86-64-v3-3.4.3-1.1 libOpenEXRUtil-3_4-33-3.4.3-1.1 libOpenEXRUtil-3_4-33-32bit-3.4.3-1.1 libOpenEXRUtil-3_4-33-x86-64-v3-3.4.3-1.1 openexr openexr-3.4.3-1.1 openexr-devel openexr-devel-3.4.3-1.1 openexr-doc openexr-doc-3.4.3-1.1 libIex-3_4-33-3.4.3-1.1 as a component of openSUSE Tumbleweed libIex-3_4-33-32bit-3.4.3-1.1 as a component of openSUSE Tumbleweed libIex-3_4-33-x86-64-v3-3.4.3-1.1 as a component of openSUSE Tumbleweed libIlmThread-3_4-33-3.4.3-1.1 as a component of openSUSE Tumbleweed libIlmThread-3_4-33-32bit-3.4.3-1.1 as a component of openSUSE Tumbleweed libIlmThread-3_4-33-x86-64-v3-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXR-3_4-33-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXR-3_4-33-32bit-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXR-3_4-33-x86-64-v3-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXRCore-3_4-33-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXRCore-3_4-33-32bit-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXRCore-3_4-33-x86-64-v3-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXRUtil-3_4-33-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXRUtil-3_4-33-32bit-3.4.3-1.1 as a component of openSUSE Tumbleweed libOpenEXRUtil-3_4-33-x86-64-v3-3.4.3-1.1 as a component of openSUSE Tumbleweed openexr-3.4.3-1.1 as a component of openSUSE Tumbleweed openexr-devel-3.4.3-1.1 as a component of openSUSE Tumbleweed openexr-doc-3.4.3-1.1 as a component of openSUSE Tumbleweed openexr as a component of SLES-LTSS-TERADATA 15 SP2 libIlmImf-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS openexr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS openexr as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS openexr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS openexr as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS openexr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS openexr as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS openexr-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS openexr as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 openexr-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 openexr as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 openexr-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 openexr as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 OpenEXR as a component of SUSE Linux Enterprise Server 11 SP4 LTSS libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openexr as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openexr as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libIlmImf-Imf_2_1-21 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS openexr as a component of SUSE Linux Enterprise Server 12 SP5-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS openexr as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openexr as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openexr as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS openexr as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS openexr as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS openexr as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server 15-LTSS libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server 15-LTSS openexr-devel as a component of SUSE Linux Enterprise Server 15-LTSS openexr as a component of SUSE Linux Enterprise Server 15-LTSS openexr as a component of SUSE Linux Enterprise Server Teradata 12 SP3 openexr as a component of SUSE Linux Enterprise Server Teradata 15 SP4 libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 openexr-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 openexr as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 openexr-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 openexr as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libIlmImf-2_2-23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libIlmImfUtil-2_2-23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 openexr-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 openexr as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libIlmImf-2_2-23 as a component of openSUSE Leap 15.6 libIlmImf-2_2-23-32bit as a component of openSUSE Leap 15.6 libIlmImfUtil-2_2-23 as a component of openSUSE Leap 15.6 libIlmImfUtil-2_2-23-32bit as a component of openSUSE Leap 15.6 openexr as a component of openSUSE Leap 15.6 openexr-devel as a component of openSUSE Leap 15.6 openexr-doc as a component of openSUSE Leap 15.6 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObject_StealAttrString of pyOpenEXR_old.cpp. The legacy adapter defines PyObject_StealAttrString that calls PyObject_GetAttrString to obtain a new reference, immediately decrefs it, and returns the pointer. Callers then pass this dangling pointer to APIs like PyLong_AsLong/PyFloat_AsDouble, resulting in a use-after-free. This is invoked in multiple places (e.g., reading PixelType.v, Box2i, V2f, etc.) Versions 3.2.5, 3.3.6, and 3.4.3 fix the issue. CVE-2025-64183 openSUSE Tumbleweed:libIex-3_4-33-3.4.3-1.1 openSUSE Tumbleweed:libIex-3_4-33-32bit-3.4.3-1.1 openSUSE Tumbleweed:libIex-3_4-33-x86-64-v3-3.4.3-1.1 openSUSE Tumbleweed:libIlmThread-3_4-33-3.4.3-1.1 openSUSE Tumbleweed:libIlmThread-3_4-33-32bit-3.4.3-1.1 openSUSE Tumbleweed:libIlmThread-3_4-33-x86-64-v3-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXR-3_4-33-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXR-3_4-33-32bit-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXR-3_4-33-x86-64-v3-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXRCore-3_4-33-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXRCore-3_4-33-32bit-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXRCore-3_4-33-x86-64-v3-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXRUtil-3_4-33-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXRUtil-3_4-33-32bit-3.4.3-1.1 openSUSE Tumbleweed:libOpenEXRUtil-3_4-33-x86-64-v3-3.4.3-1.1 openSUSE Tumbleweed:openexr-3.4.3-1.1 openSUSE Tumbleweed:openexr-devel-3.4.3-1.1 openSUSE Tumbleweed:openexr-doc-3.4.3-1.1 SLES-LTSS-TERADATA 15 SP2:openexr SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:openexr SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:openexr-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:openexr SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:openexr-devel SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libIlmImf-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openexr SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openexr-devel SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openexr SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openexr-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libIlmImf-2_2-23 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:openexr SUSE Linux Enterprise Module for Desktop Applications 15 SP6:openexr-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libIlmImf-2_2-23 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:openexr SUSE Linux Enterprise Module for Desktop Applications 15 SP7:openexr-devel SUSE Linux Enterprise Server 11 SP4 LTSS:OpenEXR SUSE Linux Enterprise Server 12 SP2-LTSS:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12 SP2-LTSS:openexr SUSE Linux Enterprise Server 12 SP4-LTSS:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12 SP4-LTSS:openexr SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:openexr SUSE Linux Enterprise Server 12 SP5-LTSS:libIlmImf-Imf_2_1-21 SUSE Linux Enterprise Server 12 SP5-LTSS:openexr SUSE Linux Enterprise Server 12 SP5-LTSS:openexr-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise Server 15 SP2-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server 15 SP2-LTSS:openexr SUSE Linux Enterprise Server 15 SP2-LTSS:openexr-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise Server 15 SP3-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server 15 SP3-LTSS:openexr SUSE Linux Enterprise Server 15 SP3-LTSS:openexr-devel SUSE Linux Enterprise Server 15 SP4-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise Server 15 SP4-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server 15 SP4-LTSS:openexr SUSE Linux Enterprise Server 15 SP4-LTSS:openexr-devel SUSE Linux Enterprise Server 15 SP5-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise Server 15 SP5-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server 15 SP5-LTSS:openexr SUSE Linux Enterprise Server 15 SP5-LTSS:openexr-devel SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server 15-LTSS:openexr SUSE Linux Enterprise Server 15-LTSS:openexr-devel SUSE Linux Enterprise Server Teradata 12 SP3:openexr SUSE Linux Enterprise Server Teradata 15 SP4:openexr SUSE Linux Enterprise Server for SAP Applications 15 SP3:libIlmImf-2_2-23 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server for SAP Applications 15 SP3:openexr SUSE Linux Enterprise Server for SAP Applications 15 SP3:openexr-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:libIlmImf-2_2-23 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server for SAP Applications 15 SP4:openexr SUSE Linux Enterprise Server for SAP Applications 15 SP4:openexr-devel SUSE Linux Enterprise Server for SAP Applications 15 SP5:libIlmImf-2_2-23 SUSE Linux Enterprise Server for SAP Applications 15 SP5:libIlmImfUtil-2_2-23 SUSE Linux Enterprise Server for SAP Applications 15 SP5:openexr SUSE Linux Enterprise Server for SAP Applications 15 SP5:openexr-devel openSUSE Leap 15.6:libIlmImf-2_2-23 openSUSE Leap 15.6:libIlmImf-2_2-23-32bit openSUSE Leap 15.6:libIlmImfUtil-2_2-23 openSUSE Leap 15.6:libIlmImfUtil-2_2-23-32bit openSUSE Leap 15.6:openexr openSUSE Leap 15.6:openexr-devel openSUSE Leap 15.6:openexr-doc moderate 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H