The vulnerability CVE-2025-7345 affects the gdk-pixbuf2 library used in Red Hat Enterprise Linux 9 and 10. It involves a heap buffer overflow in the gdk_pixbuf__jpeg_image_load_increment function and glib's g_base64_encode_step when handling specially crafted JPEG images. This overflow can result in out-of-bounds reads from heap memory, which may cause application crashes or enable arbitrary code execution. Red Hat has issued security advisories RHSA-2025:12841 and RHSA-2025:12862 providing updated gdk-pixbuf2 packages that fix this issue. The updates are rated with a Moderate security impact by Red Hat but the CVSS v3.1 score is 7.5 (High) with an attack vector of network, no privileges required, and no user interaction needed.

The vulnerability allows attackers to cause a heap buffer overflow during Base64 encoding of malicious JPEG images, leading to out-of-bounds heap memory reads. This can result in application crashes (denial of service) or potentially arbitrary code execution, impacting the availability and security of affected systems running vulnerable versions of gdk-pixbuf2.

Red Hat has released official security updates for gdk-pixbuf2 that address CVE-2025-7345. Users of Red Hat Enterprise Linux 9 and 10 should apply the updated packages as described in advisories RHSA-2025:12841 and RHSA-2025:12862. The updates fix the heap buffer overflow vulnerability. No additional mitigation is required beyond applying these official patches.