Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-7345


A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.


Published

2025-07-08T14:15:32.397

Last Modified

2025-11-03T18:17:02.270

Status

Undergoing Analysis

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-120

Affected Vendors & Products

-


References