Skip to content

Product

xfig fig2dev vulnerabilities

3 published CVES affecting xfig fig2dev, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest xfig fig2dev CVEs

Newest publication first

  1. MediumCVSS 6.6 EPSS 0.20%

    Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.

  2. MediumCVSS 6.6 EPSS 0.20%

    Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.

  3. MediumCVSS 6.6 EPSS 0.22%

    heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.