The gdk-pixbuf2 packages, which provide an image loading library extensible by loadable modules for new image formats and are used by toolkits such as GTK+ and clutter, contain a heap buffer overflow vulnerability identified as CVE-2025-7345. This vulnerability could allow an attacker to cause memory corruption via crafted image data. Red Hat has released a security update for Red Hat Enterprise Linux 7 Extended Lifecycle Support to fix this issue. The advisory references updated packages version 2.36.12-4.el7_9 for multiple architectures. No CVSS score is provided in the advisory, but Red Hat rates the impact as moderate.

The heap buffer overflow in gdk-pixbuf2 can lead to memory corruption, which may cause application crashes or potentially allow code execution depending on the context of use. The vulnerability affects Red Hat Enterprise Linux 7 Extended Lifecycle Support. No known exploits in the wild have been reported. The impact is rated moderate by Red Hat Product Security.

Red Hat has released an official security update for gdk-pixbuf2 in Red Hat Enterprise Linux 7 Extended Lifecycle Support. Users should apply the updated packages (e.g., gdk-pixbuf2-2.36.12-4.el7_9) available from Red Hat to remediate this vulnerability. Refer to the Red Hat advisory RHSA-2025:14683 and the update instructions at https://access.redhat.com/articles/11258 for detailed guidance. No additional mitigation steps are indicated by the vendor.