GNOME Dia
3 CVEs affecting GNOME Dia. Latest disclosed: 2026-08-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77652 | High | 7.8 | 2026-08-26 | A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer al… |
CVE-2026-77658 | High | 7.8 | 2026-08-26 | A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/networ… |
CVE-2019-19451 | Medium | 5.5 | 2019-11-29 | When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus en… |