Public vulnerability disclosure
CVE-2025-46397
Xfig: xfig: stack-overflow allows possible code execution via local input manipulation
publishedCWE-120
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
Technical severity7.8 highCVSS 3.1 · CNA: redhat
Published2025-04-23Source updated 2026-11-02
Collected2026-11-022 attributed sources
Fixes and workarounds
No remediation reported in collected sources.
Missing remediation information is not evidence that no patch exists.
Affected products and versions
| Product | Versions | Authority |
|---|---|---|
xfig
https://sourceforge.net/projects/mcj/ |
≥ 0; ≤ 3.2.9a (affected, semver)
Other versions: unaffected |
CNA: redhat |
| Red Hat Enterprise Linux 8 Red Hat transfig
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:3.2.6a-5.el8_10; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9 Red Hat transfig
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:3.2.7b-11.el9_7; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat transfig
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:3.2.7b-10.el9_4.1; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat transfig
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:3.2.7b-10.el9_6.1; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 6 Red Hat transfig
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unknown |
CNA: redhat |
| Red Hat Enterprise Linux 7 Red Hat transfig
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unknown |
CNA: redhat |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 3.1 / 7.8 high |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CNA: redhat |
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.
References
- https://access.redhat.com/errata/RHSA-2026:0700CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0704CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0705CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0756CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-46397CNA: redhat · vdb-entry, x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2362058CNA: redhat · issue-tracking, x_refsource_REDHAT
- https://sourceforge.net/p/mcj/tickets/192/CNA: redhat
- https://lists.debian.org/debian-lts-announce/2025/04/msg00043.htmlADP: CVE