alpine · CVE-2025-46397

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2025-46397: 1 source package rows (fig2dev); 4 state rows across 3 repos (3.22-community, 3.23-community, edge-community); fixed 0, open 4.

Description:

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.