xfig project vulnerabilities

Products

• fig2dev 10
• xfig 3

Latest xfig project CVEs

Newest publication first

1. CVE-2021-40241 xfig 3.2.7 is vulnerable to Buffer Overflow.

   Published 2022-10-31

   Critical·CVSS 9.8 EPSS 1.2%

   xfig 3.2.7 is vulnerable to Buffer Overflow.

2. CVE-2021-32280 An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service....

   Published 2021-09-20

   Medium·CVSS 5.5 EPSS 0.98%

   An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

3. CVE-2020-21535 fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 0.89%

   fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.

4. CVE-2020-21534 fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 0.87%

   fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

5. CVE-2020-21533 fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 0.87%

   fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

6. CVE-2020-21530 fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 0.72%

   fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.

7. CVE-2020-21532 fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 1.1%

   fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

8. CVE-2020-21531 fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 1.1%

   fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.

9. CVE-2020-21529 fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

   Published 2021-09-16

   Medium·CVSS 5.5 EPSS 1.1%

   fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

10. CVE-2019-19797 read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

    Published 2019-12-15

    Medium·CVSS 5.5 EPSS 1.2%

    read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

11. CVE-2019-19555 read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.

    Published 2019-12-04

    Medium·CVSS 5.5 EPSS 1.1%

    read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.

12. CVE-2019-14275 Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.

    Published 2019-07-26

    Medium·CVSS 5.5 EPSS 1.2%

    Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.

13. CVE-2017-16899 An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to....

    Published 2017-11-20

    High·CVSS 7.1 EPSS 1.4%

    An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in rea...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.