CVE-2025-46400

MediumCVSS 5.5

Published: 23/04/2025(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

In the xfig diagramming tool, a segmentation fault occurs in fig2dev within the read_arcobject function, allowing an attacker to cause a denial of service via local input manipulation.

Risk Assessment

An attacker with local access can craft malicious input to crash fig2dev, disrupting the tool's availability for legitimate users.

Recommendation

Update xfig to the latest version containing the fix for CVE-2025-46400 and restrict trusted input sources for fig2dev.

Original NVD description (English source)

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.