Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-7345

Опубликовано: 08 июл. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

EPSS

Процентиль: 33%
0.00129
Низкий

7.5 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
redhat
4 месяца назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
msrc
4 месяца назад

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

CVSS3: 7.5
debian
4 месяца назад

A flaw exists in gdk\u2011pixbuf within the gdk_pixbuf__jpeg_image_loa ...

suse-cvrf
2 месяца назад

Security update for gdk-pixbuf

EPSS

Процентиль: 33%
0.00129
Низкий

7.5 High

CVSS3

Дефекты

CWE-120