A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.
CVE-2025-46399
CVSS base score
5.5 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-476
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
fig2dev project fig2dev
redhat enterprise linux
References
- access.redhat.com Vendor Advisory
- bugzilla.redhat.com Vendor Advisory
- sourceforge.net Exploit, Issue Tracking
- lists.debian.org