CVE-2025-46398: Xfig: fig2dev stack-overflow via read_objects
In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function.
Other sources
Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via readobjects function.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46398?
CVE-2025-46398 is classified as a critical vulnerability due to the potential for code execution.
How do I fix CVE-2025-46398?
To fix CVE-2025-46398, update to the latest version of Fig2Dev that resolves this vulnerability.
What are the potential impacts of CVE-2025-46398?
The potential impacts of CVE-2025-46398 include unauthorized code execution which can lead to system compromise.
Which software versions are affected by CVE-2025-46398?
CVE-2025-46398 affects Fig2Dev version 3.2.9a specifically.
Who can exploit CVE-2025-46398?
Any attacker with local access can exploit CVE-2025-46398 through manipulation of input to the read_objects function.