CVE Catalog
CVE-2025-46398
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.22%
12th percentile - higher than 12% of all known CVEs
Summary
In the xfig diagramming tool, a stack overflow while running fig2dev allows memory corruption via local input manipulation in the read_objects function.
Risk Assessment
A local attacker could exploit this vulnerability to corrupt memory, potentially leading to unexpected behavior or arbitrary code execution in the context of the user running fig2dev.
Recommendation
It is recommended to update xfig to the latest patched version and avoid processing untrusted fig files in production environments.
Original NVD description (English source)
In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.