Description

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

INFO

Published Date :

2025-07-08T13:39:07.949Z

Last Modified :

2025-11-07T18:35:10.479Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2025-7345 vulnerability.

Vendors Products
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Els
  • Rhel Eus
  • Rhel Eus Long Life
  • Rhel Tus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-7345.

URL Resource
https://access.redhat.com/errata/RHSA-2025:12841 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:12862 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:13315 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14574 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14575 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14576 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14585 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14618 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14646 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14647 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:14683 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2025-7345 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2377063 cve-icon cve-icon
https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/249 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00024.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-7345 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-7345 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact