vulnerability

Oracle Linux: CVE-2025-46397: ELSA-2026-0700: transfig security update (MODERATE) (Multiple Advisories)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Apr 23, 2025
Added
Jan 19, 2026
Modified
Jan 23, 2026

Description

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.

Solution

oracle-linux-upgrade-transfig

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today