Vulnerabilities > CVE-2025-46400

047910
CVSS 4.7 - MEDIUM
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
local
high complexity
CWE-476
NVD
Published: 2025-04-23
Updated: 2025-05-15

Summary

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

Common Weakness Enumeration (CWE)

References