Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 20

Export CSV
CVE-2025-46400

Xfig: fig2dev segmentation fault in read_arcobject

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project Redhat
Products
Fig2dev Enterprise Linux Rhel Els
CVE-2025-46397

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project Redhat
Products
Fig2dev Enterprise Linux Rhel Els and 1 more
CVE-2025-31164

fig2dev heap-buffer overflow

heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2025-31163

fig2dev segmentation fault

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2025-31162

fig2dev float point exception

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2021-3561

fig2dev: Global buffer overflow in fig2dev/read.c in function read_objects

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS 3.1 · 7.1 High EPSS 1.2% KEV · Not listed
Vendors
Debian Fedoraproject Fig2dev Project
Products
Debian Linux Fedora Fig2dev
CVE-2021-37530

transfig: Segfault in the open_stream function in readpics.c

A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fig2dev Project
Products
Debian Linux Fig2dev
CVE-2021-37529

transfig: Double-free via the free_stream function in readpics.c

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fig2dev Project
Products
Debian Linux Fig2dev
CVE-2020-21684

transfig: A global buffer overflow in the put_font in genpict2e.c could result in a denial of service

A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2020-21683

transfig: A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c could result in a denial of service

A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2020-21682

transfig: A global buffer overflow in the set_fill component in genge.c could result in a denial of service

A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2020-21681

transfig: A global buffer overflow in the set_color component in genge.c could result in a denial of service

A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2020-21680

transfig: A stack-based buffer overflow in the put_arrow() component in genpict2e.c could result in a denial of service

A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2020-21678

transfig: A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c could result in a denial of service

A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fig2dev Project
Products
Fig2dev
CVE-2020-21676

transfig: A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c could result in a denial of service

A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Debian Fig2dev Project
Products
Debian Linux Fig2dev
CVE-2020-21675

transfig: A stack-based buffer overflow in the genptk_text component in genptk.c could result in a denial of service

A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Debian Fig2dev Project
Products
Debian Linux Fig2dev
CVE-2019-19746

transfig: integer overflow leads to out-of-bounds write in make_arrow in arrow.c

make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Fedoraproject Fig2dev Project
Products
Fedora Fig2dev
CVE-2018-16140

transfig: Buffer underwrite in read.c:get_line() via crafted FIG file

A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.

CVSS 3.0 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Fig2dev Project
Products
Ubuntu Linux Fig2dev