{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "9a32b863074ed4140141e0d3613905c6f1fe61c5"
              },
              {
                "fixed": "8.0"
              },
              {
                "introduced": "7.1.1"
              }
            ],
            "source": "AFFECTED_FIELD"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "140fd653aed8cad774f991ba083e2d01e86420c7"
            },
            {
              "introduced": "db69d06eeeab4f46da15030a80d539efb4503ca8"
            },
            {
              "fixed": "140fd653aed8cad774f991ba083e2d01e86420c7"
            }
          ],
          "repo": "https://git.ffmpeg.org/ffmpeg.git",
          "type": "GIT"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Google",
    "cwe_ids": [
      "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59731.json"
  },
  "details": "When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data.\n\nWe read rle_raw_size from the input file at [0], we decompress and decode into the buffer td-\u003erle_raw_data of size rle_raw_size at [1], and then at [2] we will access entries in this buffer up to (td-\u003exsize - 1) * (td-\u003eysize - 1) + rle_raw_size / 2, which may exceed rle_raw_size.\n\n\n\n\nWe recommend upgrading to version 8.0 or beyond.",
  "id": "CVE-2025-59731",
  "modified": "2026-08-16T11:46:29.133134817Z",
  "published": "2025-10-06T08:09:23.410Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://issuetracker.google.com/436510153"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59731.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59731"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.ffmpeg.org/ffmpeg.git"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress"
}