Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2025-46399 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2025-46399

CVE-2025-46399

MEDIUM5.5

Xfig: transfig: fig2dev segmentation fault vulnerability

Published Apr 23, 2025

Modified 2 months ago

Details

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.

References

https://access.redhat.com/security/cve/CVE-2025-46399

https://bugzilla.redhat.com/show_bug.cgi?id=2362053

https://lists.debian.org/debian-lts-announce/2025/04/msg00043.html

https://sourceforge.net/p/mcj/tickets/190/

https://www.cve.org/CVERecord?id=CVE-2025-46399

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

HighI:H

Availability

NoneA:N

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness Type (CWE)

Memory Safety

NULL Pointer Dereference

Ecosystems

Timeline

PublishedApr 23, 2025

ModifiedJan 8, 2026