A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
References
Configurations
No configuration.
History
07 Aug 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Aug 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References |
|
09 Jul 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-120 |
08 Jul 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-08 14:15
Updated : 2025-08-07 07:15
NVD link : CVE-2025-7345
Mitre link : CVE-2025-7345
CVE.ORG link : CVE-2025-7345
JSON object : View
Products Affected
No product.
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')