CVE-2025-46399

MediumCVSS 5.5

Published: 23/04/2025(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A vulnerability was found in fig2dev that allows an attacker to manipulate local input in the genge_itp_spline function, potentially leading to availability issues.

Risk Assessment

The organization faces the risk of service or system disruption if an attacker with local access exploits this vulnerability to cause a crash.

Recommendation

It is recommended to immediately update fig2dev to the latest patched version and restrict local access to the system.

Original NVD description (English source)

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.