Critical Vulnerability Information Vulnerability Overview CVE ID: CVE-2025-53010 Severity: Low Affected Versions: 1.39.2 Fixed Version: 1.39.3 Vulnerability Description During the parsing of shader nodes in MTLX files, MaterialXCore code accesses a potentially null pointer, which may lead to program crashes, especially when processing maliciously crafted files. Detailed Information The issue occurs in the function, which retrieves output nodes from a given node graph input node. The specific code snippet is as follows: The root cause is that may return a null pointer, leading to a crash when attempting to call . Impact An attacker can intentionally crash target programs using OpenEXR by sending maliciously crafted MTLX files. PoC The PoC file can be downloaded from the following link: nullptr_getshadernodes.mtlx Build and run: