CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-46399: Xfig: fig2dev segmentation fault in genge_itp_spline

Description

In xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.

Classification

CVE ID: CVE-2025-46399

Problem Types

NULL Pointer Dereference

Affected Products

Vendor:

Product:

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.02% (probability of being exploited)

EPSS Percentile: 4.57% (scored less or equal to compared to others)

EPSS Date: 2025-06-13 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-46399
https://access.redhat.com/security/cve/CVE-2025-46399
https://bugzilla.redhat.com/show_bug.cgi?id=2362053
https://sourceforge.net/p/mcj/tickets/190/

Timeline