CVE-2025-7345

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpegimageloadincrement function (io-jpeg.c) and in glib’s gbase64encodestep (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

Database specific

{
    "cwe_ids": [
        "CWE-120"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7345.json",
    "cna_assigner": "redhat"
}

References

Affected packages

Git / gitlab.gnome.org/gnome/gdk-pixbuf

Affected ranges

Type

GIT

Repo

https://gitlab.gnome.org/gnome/gdk-pixbuf

Events

Introduced

Fixed

ec3af717f524eac0a6403449d8b7781c93c3798e

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.43.4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2.*

2.21.3

2.21.4

2.21.6

2.21.7

2.22.0

2.22.1

2.23.0

2.23.1

2.23.2

2.23.3

2.23.4

2.23.5

2.24.0

2.25.0

2.25.2

2.26.0

2.26.1

2.26.2

2.26.3

2.26.4

2.26.5

2.27.0

2.27.1

2.27.2

2.27.3

2.28.0

2.29.0

2.29.1

2.29.2

2.29.3

2.30.0

2.30.1

2.30.2

2.30.3

2.30.4

2.30.5

2.30.6

2.30.7

2.30.8

2.31.0

2.31.1

2.31.2

2.31.3

2.31.4

2.31.5

2.31.6

2.31.7

2.32.0

2.32.1

2.33.1

2.33.2

2.34.0

2.35.1

2.35.2

2.35.3

2.35.4

2.35.5

2.36.0

2.36.1

2.36.10

2.36.11

2.36.12

2.36.2

2.36.3

2.36.4

2.36.5

2.36.6

2.36.7

2.36.8

2.36.9

2.37.0

2.37.92

2.38.0

2.39.2

2.40.0

2.42.0

2.42.10

2.42.11

2.42.12

2.42.2

2.42.4

2.42.6

2.42.8

2.42.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7345.json"