A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
References
Configurations
No configuration.
History
03 Nov 2025, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Aug 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
26 Aug 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
26 Aug 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Aug 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Aug 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-08 14:15
Updated : 2025-11-03 18:17
NVD link : CVE-2025-7345
Mitre link : CVE-2025-7345
CVE.ORG link : CVE-2025-7345
JSON object : View
Products Affected
No product.
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')