CVE-2025-46397 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation
A stack overflow in Xfig's bezier_spline function allows local attackers to execute arbitrary code via crafted input files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-46397?
CVE-2025-46397 is a high-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 23 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
Weakness: CWE-120
Which versions are affected by CVE-2025-46397?
It affects 2 products.
Linux distribution packages (16)
transfig AlmaLinux:8 | All versions | 1:3.2.6a-5.el8_10 |
transfig AlmaLinux:9 | All versions | 1:3.2.7b-11.el9_7 |
transfig Red Hat:enterprise_linux:8::crb | All versions | 1:3.2.6a-5.el8_10 |
transfig-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 1:3.2.6a-5.el8_10 |
transfig-debugsource Red Hat:enterprise_linux:8::crb | All versions | 1:3.2.6a-5.el8_10 |
transfig Red Hat:enterprise_linux:9::crb | All versions | 1:3.2.7b-11.el9_7 |
transfig-debuginfo Red Hat:enterprise_linux:9::crb | All versions | 1:3.2.7b-11.el9_7 |
transfig-debugsource Red Hat:enterprise_linux:9::crb | All versions | 1:3.2.7b-11.el9_7 |
transfig Red Hat:rhel_eus:9.4::crb | All versions | 1:3.2.7b-10.el9_4.1 |
transfig-debuginfo Red Hat:rhel_eus:9.4::crb | All versions | 1:3.2.7b-10.el9_4.1 |
transfig-debugsource Red Hat:rhel_eus:9.4::crb | All versions | 1:3.2.7b-10.el9_4.1 |
transfig Red Hat:rhel_eus:9.6::crb | All versions | 1:3.2.7b-10.el9_6.1 |
transfig-debuginfo Red Hat:rhel_eus:9.6::crb | All versions | 1:3.2.7b-10.el9_6.1 |
transfig-debugsource Red Hat:rhel_eus:9.6::crb | All versions | 1:3.2.7b-10.el9_6.1 |
transfig Rocky Linux:8 | All versions | 1:3.2.6a-5.el8_10 |
transfig Rocky Linux:9 | All versions | 1:3.2.7b-11.el9_7 |
Products include Fig2dev Project Fig2dev, Redhat Enterprise Linux.
How do I fix CVE-2025-46397?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-46397 being exploited?
There is no known exploitation of CVE-2025-46397 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as ALSA-2026:0700, ALSA-2026:0756, DEBIAN-CVE-2025-46397, GHSA-fqm9-qqwf-gq9r, RHSA-2026:0700, RHSA-2026:0704 and 4 more.