Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-7345

Опубликовано: 08 июл. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

РелизСтатусПримечание
devel

deferred

2025-07-11
esm-infra/bionic

deferred

2025-07-11
esm-infra/focal

deferred

2025-07-11
esm-infra/xenial

deferred

2025-07-11
jammy

deferred

2025-07-11
noble

deferred

2025-07-11
oracular

ignored

end of life, was needs-triage
plucky

deferred

2025-07-11
upstream

deferred

2025-07-11

Показывать по

EPSS

Процентиль: 25%
0.00083
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
26 дней назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
nvd
26 дней назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
msrc
18 дней назад

Описание отсутствует

CVSS3: 7.5
debian
26 дней назад

A flaw exists in gdk\u2011pixbuf within the gdk_pixbuf__jpeg_image_loa ...

CVSS3: 7.5
github
26 дней назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

EPSS

Процентиль: 25%
0.00083
Низкий

7.5 High

CVSS3