CVE-2025-46400

概要

参考情報

• access.redhat.com/security/cve/CVE-2025-46400 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Vendor Advisory
• sourceforge.net/p/mcj/tickets/187 · Exploit
• lists.debian.org/debian-lts-announce/2025/04/msg00043.html

fig2dev のその他の脆弱性

• CVE-2025-46399中 5.5A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.
• CVE-2025-46398中 5.5In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects func…
• CVE-2025-46397高 7.8A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
• CVE-2025-31164中 6.6heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spli…
• CVE-2025-31163中 6.6Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.