PT-2025-17670 · Fig2Dev+3 · Fig2Dev+3

Liuchenyifan · Published 2025-02-11 · Updated 2025-10-31 · CVE-2025-46398

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a

Description The issue allows an attacker possible code execution via local input manipulation through the read objects function.

Recommendations For fig2dev version 3.2.9a, consider restricting access to the read objects function until a patch is available.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-11850

CVE-2025-46398

DLA-4147-1

MGASA-2025-0253

OESA-2025-1509

OESA-2025-1510

OESA-2025-1947

OESA-2025-1948

OESA-2025-1949

OPENSUSE-SU-2025:15155-1

SUSE-SU-2025:01835-1

SUSE-SU-2025:01835-2

SUSE-SU-2025:01890-1

Affected Products

Astra Linux

Debian

Suse

Fig2Dev

References · 67

• 🔥 https://sourceforge.net/p/mcj/tickets/191 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-46398 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46400 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1509 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11850 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01835-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0253 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46398 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0253.html · Security Note
• https://access.redhat.com/security/cve/CVE-2025-46398 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-46398 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1510 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15155-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1947 · Vendor Advisory