CVE-2025-46397: Xfig: xfig: stack-overflow allows possible code execution via local input manipulation
Published Apr 23, 2025
·Updated
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function.
Other sources
Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezierspline function.
— Red Hat
Affected Software
6 affected components
Xfig fig2dev
Fig2dev Project Fig2dev=3.2.9a
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
redhat Enterprise Linux=9.0
Event History
Apr 23, 2025
CVE Published
via MITRE·08:55 PM
Data Sourced
via MITRE·08:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Apr 24, 2025
Data Sourced
via Red Hat·02:01 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-46397?
The severity of CVE-2025-46397 is critical due to the potential for code execution via stack overflow.
2
How do I fix CVE-2025-46397?
To fix CVE-2025-46397, users should update to the latest version of fig2dev that addresses this vulnerability.
3
What is the nature of the vulnerability in CVE-2025-46397?
CVE-2025-46397 is a stack overflow vulnerability in the bezier_spline function of fig2dev.
4
What kind of attacks can CVE-2025-46397 enable?
CVE-2025-46397 can enable attackers to execute arbitrary code on the affected system.
5
Which versions of fig2dev are affected by CVE-2025-46397?
CVE-2025-46397 affects fig2dev version 3.2.9a and possibly prior versions.