Is CVE-2025-7345 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-7345 being exploited in the wild.

How severe is CVE-2025-7345?

High severity, with a CVSS score of 7.5, published 8 July 2025.

Is there a fix for CVE-2025-7345?

A patch was published on 2025-08-05: Red Hat released security updates for RHEL 9 and 10. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-7345 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-7345?

Check whether you run Gnome Gdk-Pixbuf at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-7345: GNOME gdk-pixbuf heap buffer overflow in JPEG loading

CVE-2025-7345 · Severity: high · CVSS 7.5 · Published 2025-07-08

A security vulnerability has been identified in gdk-pixbuf, a widely used library for loading and displaying images in Linux environments. By tricking a system into processing a specially crafted JPEG image, an attacker could cause the application to crash or potentially execute unauthorized commands. This impact could lead to service disruptions or unauthorized access to data handled by affected applications.

Technologies: Gnome Gdk-Pixbuf. Vendors: Gnome.

Quick answers

Is CVE-2025-7345 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-7345 being exploited in the wild.
How severe is CVE-2025-7345?: High severity, with a CVSS score of 7.5, published 8 July 2025.
Which products and versions are affected?: Gnome Gdk-Pixbuf < 2.43.4.
Is there a fix for CVE-2025-7345?: A patch was published on 2025-08-05: Red Hat released security updates for RHEL 9 and 10. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-7345 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-7345?: Check whether you run Gnome Gdk-Pixbuf at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A heap-based buffer overflow exists in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib's g_base64_encode_step (glib/gbase64.c). The flaw is triggered during the Base64 encoding process when handling maliciously crafted JPEG images. An attacker can exploit this to perform out-of-bounds reads from heap memory, which may result in a denial-of-service (application crash) or arbitrary code execution. The vulnerability is reachable over the network without authentication if an application processes untrusted image input. Patches have been released by GNOME and various Linux distributions including Red Hat and Debian.

Affected products

GNOME gdk-pixbuf < 2.43.4
Red Hat Red Hat Enterprise Linux 10 < 2.42.12-4.el10_0
Red Hat Red Hat Enterprise Linux 9 < 2.42.6-6.el9_6
Red Hat Red Hat Enterprise Linux 8 < 2.36.12-7.el8_10
Red Hat Red Hat Enterprise Linux 7 < 2.36.12-4.el7_9

Timeline

2025-07-08: disclosed
2025-08-05: patched: Red Hat released security updates for RHEL 9 and 10.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.