CVE-2025-7345CWE-120

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

High · published July 8, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01341 · 71.1th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-07-08T13:39Z
EPSS history
Timeline
  • 08 JUL 13:39Z
    Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
    cvelistv5