Known Vulnerabilities for Fig2dev by Fig2dev Project
Listed below are 10 of the newest known vulnerabilities associated with "Fig2dev" by "Fig2dev Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-46400 json | In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manip... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2025-46399 json | A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline functio... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2025-46398 json | In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via re... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2025-46397 json | Not Provided | 2025-04-23 | 2026-06-30 | |
| CVE-2021-37530 json | A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. | 5.5 - MEDIUM | 2022-01-12 | 2022-01-19 |
| CVE-2021-37529 json | A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which... | 5.5 - MEDIUM | 2022-01-12 | 2022-01-19 |
| CVE-2021-3561 json | An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to pr... | 7.1 - HIGH | 2021-05-26 | 2024-01-26 |
| CVE-2020-21684 json | A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS)... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21683 json | A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21682 json | A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Fig2dev Project | Fig2dev | 3.2.7b | |||
| Application | Fig2dev Project | Fig2dev | 3.2.7a |