Known Vulnerabilities for products from Fig2dev Project
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Fig2dev Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-46400 json | In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manip... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2025-46399 json | A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline functio... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2025-46398 json | In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via re... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2025-46397 json | A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline fu... | Not Provided | 2025-04-23 | 2026-06-30 |
| CVE-2021-37530 json | A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. | 5.5 - MEDIUM | 2022-01-12 | 2022-01-19 |
| CVE-2021-37529 json | A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which... | 5.5 - MEDIUM | 2022-01-12 | 2022-01-19 |
| CVE-2021-3561 json | An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to pr... | 7.1 - HIGH | 2021-05-26 | 2024-01-26 |
| CVE-2020-21684 json | A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS)... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21683 json | A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21682 json | A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21681 json | A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of servic... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21680 json | A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denia... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21678 json | A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a... | 5.5 - MEDIUM | 2021-08-10 | 2022-12-07 |
| CVE-2020-21676 json | A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a... | 5.5 - MEDIUM | 2021-08-10 | 2023-02-28 |
| CVE-2020-21675 json | A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial o... | 5.5 - MEDIUM | 2021-08-10 | 2022-11-09 |
| CVE-2019-19746 json | make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overfl... | 5.5 - MEDIUM | 2019-12-12 | 2023-11-07 |
| CVE-2018-16140 json | A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning... | 7.8 - HIGH | 2018-08-30 | 2020-01-22 |
Known software with vulnerabilities from Fig2dev Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Fig2dev Project | Fig2dev | 3.2.7a |