CVE-2025-7345

High

Advisory

Published 8 Jul 2025In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.012; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 207; of 17,781 indexed, latest versions
Container images: 221; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: gdk-pixbuf2 security update

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 221 images.

Affected package	Affected versions	Fixed in	Images
gdk-pixbufdeb	2.32.2-1ubuntu1.4, 2.32.2-1ubuntu1.5, 2.32.2-1ubuntu1.6, 2.36.11-2+15 more	2.32.2-1ubuntu1.6+esm2, 2.36.11-2ubuntu0.1~esm2, 2.40.0+dfsg-3ubuntu0.5+esm1, 2.42.2+dfsg-1+deb11u4+3 more	206
gdk-pixbuf2rpm	2.36.12-3.el7, 2.36.12-5.el8, 2.36.12-6.el8_10, 2.42.6-4.el9_4	0:2.36.12-4.el7_9, 0:2.36.12-7.el8_10, 0:2.42.6-6.el9_6	15

OSV records: DEBIAN-CVE-2025-7345 RHSA-2025:12841 RHSA-2025:13315 RHSA-2025:14683 UBUNTU-CVE-2025-7345 DLA-4344-1
Also known as: RHSA-2025:14574, RHSA-2025:14585, RHSA-2025:14618, RHSA-2025:14647, USN-7662-1

Charts affected

207 by stars

Chart

Latest

Affected images

Radar Score

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3

Open the chart page →

14,358

maybe-financevicsufer

0.2.7

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	2.42.10+dfsg-1+deb12u3

Open the chart page →

10,795

vinyl-lib-chartvinyl-lib

0.1.0

1 of 1 See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
kporwit/vinyl_lib_app :v0.1.1	217de0302218	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u4

Open the chart page →

3,392

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	gdk-pixbuf@2.42.2+dfsg-1+deb11u1	2.42.2+dfsg-1+deb11u4

Open the chart page →

2,019

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u4

Open the chart page →

2,132

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gdk-pixbuf@2.42.8+dfsg-1ubuntu0.3	2.42.8+dfsg-1ubuntu0.4

Open the chart page →

14,100

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-7345.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	gdk-pixbuf@2.42.2+dfsg-1+deb11u1	2.42.2+dfsg-1+deb11u4

Open the chart page →

1,838

Container images carrying it

221 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/remla23-team17/model-service :1.0.0	aa59fe2c4f6a	gdk-pixbuf@2.42.2+dfsg-1+deb11u1	2.42.2+dfsg-1+deb11u4	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	gdk-pixbuf@2.42.2+dfsg-1+deb11u1	2.42.2+dfsg-1+deb11u4	1
ghcr.io/rodg/nodecg-base :latest	31be4bf87070	gdk-pixbuf@2.42.2+dfsg-1+deb11u1	2.42.2+dfsg-1+deb11u4	1
ghcr.io/savonet/liquidsoap :v2.0.1	9e08148e1055	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u4	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	2.42.10+dfsg-1+deb12u3	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	gdk-pixbuf@2.40.0+dfsg-3ubuntu0.4	2.40.0+dfsg-3ubuntu0.5+esm1	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	gdk-pixbuf@2.40.0+dfsg-3ubuntu0.4	2.40.0+dfsg-3ubuntu0.5+esm1	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	gdk-pixbuf@2.42.2+dfsg-1+deb11u1	2.42.2+dfsg-1+deb11u4	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	gdk-pixbuf@2.42.2+dfsg-1	2.42.2+dfsg-1+deb11u4	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	2.42.10+dfsg-1+deb12u3	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	2.42.10+dfsg-1+deb12u3	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	gdk-pixbuf@2.42.10+dfsg-1+deb12u1	2.42.10+dfsg-1+deb12u3	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	gdk-pixbuf2@2.36.12-5.el8	0:2.36.12-7.el8_10	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	gdk-pixbuf@2.32.2-1ubuntu1.6	2.32.2-1ubuntu1.6+esm2	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	gdk-pixbuf2@2.36.12-5.el8	0:2.36.12-7.el8_10	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	gdk-pixbuf@2.42.10+dfsg-1+b1	2.42.10+dfsg-1+deb12u3	1