U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CVE-2025-7345 Detail

Description

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.


Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://access.redhat.com/errata/RHSA-2025:12841 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:12862 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:13315 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14574 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14575 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14576 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14585 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14618 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14646 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14647 Red Hat, Inc.
https://access.redhat.com/errata/RHSA-2025:14683 Red Hat, Inc.
https://access.redhat.com/security/cve/CVE-2025-7345 Red Hat, Inc.
https://bugzilla.redhat.com/show_bug.cgi?id=2377063 Red Hat, Inc.
https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/249 Red Hat, Inc.

Weakness Enumeration

CWE-ID CWE Name Source
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Red Hat, Inc.  

Change History

7 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2025-7345
NVD Published Date:
07/08/2025
NVD Last Modified:
08/30/2025
Source:
Red Hat, Inc.