debian/fig2dev vulnerabilities

Latest debian/fig2dev CVEs

Newest publication first · page 1 of 2

1. DLA-4147-1 fig2dev - security update

   Published 2025-04-30

   Unknown

2. CVE-2025-46400 Xfig: fig2dev segmentation fault in read_arcobject

   Published 2025-04-23

   Medium·CVSS 5.5 EPSS 0.25%

   In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.

3. CVE-2025-46399 Xfig: transfig: fig2dev segmentation fault vulnerability

   Published 2025-04-23

   Medium·CVSS 5.5 EPSS 0.25%

   A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.

4. CVE-2025-46398 Xfig: fig2dev stack-overflow via read_objects

   Published 2025-04-23

   Medium·CVSS 5.5 EPSS 0.27%

   In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.

5. CVE-2025-46397 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

   Published 2025-04-23

   High·CVSS 7.8 EPSS 0.31%

   A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

6. DLA-4134-1 fig2dev - security update

   Published 2025-04-21

   Unknown

7. CVE-2025-31162 fig2dev float point exception

   Published 2025-03-28

   Medium·CVSS 6.6 EPSS 0.20%

   Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.

8. CVE-2025-31163 fig2dev segmentation fault

   Published 2025-03-28

   Medium·CVSS 6.6 EPSS 0.20%

   Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.

9. CVE-2025-31164 fig2dev heap-buffer overflow

   Published 2025-03-28

   Medium·CVSS 6.6 EPSS 0.22%

   heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline.

10. DLA-3304-1 fig2dev - security update

    Published 2023-01-31

    Unknown

11. CVE-2021-37530 A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.

    Published 2022-01-12

    Medium·CVSS 5.5 EPSS 0.77%

    A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.

12. CVE-2021-37529 A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).

    Published 2022-01-12

    Medium·CVSS 5.5 EPSS 0.77%

    A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).

13. DLA-2778-1 fig2dev - security update

    Published 2021-10-04

    Unknown

14. CVE-2021-32280 An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service....

    Published 2021-09-20

    Medium·CVSS 5.5 EPSS 0.98%

    An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

15. CVE-2020-21535 fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 0.89%

    fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.

16. CVE-2020-21534 fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 0.87%

    fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

17. CVE-2020-21533 fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 0.87%

    fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

18. CVE-2020-21530 fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 0.72%

    fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.

19. CVE-2020-21532 fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 1.1%

    fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

20. CVE-2020-21531 fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 1.1%

    fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.

21. CVE-2020-21529 fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

    Published 2021-09-16

    Medium·CVSS 5.5 EPSS 1.1%

    fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

22. CVE-2020-21678 A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.

    Published 2021-08-10

    Medium·CVSS 5.5 EPSS 0.66%

    A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.

23. CVE-2020-21675 A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

    Published 2021-08-10

    Medium·CVSS 5.5 EPSS 1.1%

    A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

24. CVE-2020-21681 A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.

    Published 2021-08-10

    Medium·CVSS 5.5 EPSS 0.72%

    A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.

25. CVE-2020-21680 A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

    Published 2021-08-10

    Medium·CVSS 5.5 EPSS 0.78%

    A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.