Every CVE Search/ Get API key

OSV-2025-871

UNKNOWN READ in ojph::local::param_cod::~param_cod

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456837230

Crash type: UNKNOWN READ
Crash state:
ojph::local::param_cod::~param_cod
ojph::local::param_cod::~param_cod
ojph::local::param_cod::~param_cod

What each source reports

OSV No score

UNKNOWN READ in ojph::local::param_cod::~param_cod

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=456837230

Crash type: UNKNOWN READ
Crash state:
ojph::local::param_cod::~param_cod
ojph::local::param_cod::~param_cod
ojph::local::param_cod::~param_cod
Record
OSV-2025-871
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
openexr
OSS-Fuzz
Listed versions, plus commit ranges
v3.4.0v3.4.0-rcv3.4.1v3.4.1-rcv3.4.1-rc2
Show 39 moreShow less
v3.4.2v3.4.2-rcv3.4.2-rc2v3.4.3-rcv3.4.3-rc2v3.4.3v3.4.3-rc3v3.4.4-rcv3.4.16-rcv3.4.16v3.4.15-rcv3.4.15v3.4.14-rcv3.4.14v3.4.13-rc3v3.4.13v3.4.13-rc2v3.4.13-rcv3.4.12v3.4.12-rc2v3.4.11-rc3v3.4.11v3.4.11-rc2v3.4.11-rcv3.4.10-rcv3.4.10v3.4.9v3.4.9-rcv3.4.8-rcv3.4.8v3.4.7v3.4.7-rcv3.4.6v3.4.6-rcv3.4.5v3.4.5-rcv3.4.4-rc2v3.4.4v3.4.0-rc2
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2025-871 is a vulnerability with no CVSS score yet in openexr, published November 3, 2025. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open