vulnerability

Red Hat: CVE-2025-46397: xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (Multiple Advisories)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Apr 23, 2025
Added
Jul 9, 2025
Modified
Jan 20, 2026

Description

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-transfigredhat-upgrade-transfig-debuginforedhat-upgrade-transfig-debugsource

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today