CVE-2025-46400 MEDIUM

CVE-2025-46400: Xfig: fig2dev segmentation fault in read_arcobject

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-476
Published April 23, 2025
Last update January 8, 2026
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

Key dates

02Disclosure timeline

April 23, 2025 CVE published
January 8, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-0209 NULL Pointer Dereference in Wireshark CVE-2025-30321 InDesign Desktop | NULL Pointer Dereference (CWE-476) CVE-2026-5745 Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive CVE-2025-59351 Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error CVE-2021-0251 Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets