Xfig Project 14 CVEs across 2 Xfig Project products. Browse Xfig Project vulnerabilities, severities, and proof-of-concept exploits.
Xfig Project products with known CVEs Xfig Project CVEs — newest first CVE Severity Score Published Summary CVE-2023-45920Medium 4.22024-03-27 Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X applic… CVE-2021-40241Critical 9.82022-10-31 xfig 3.2.7 is vulnerable to Buffer Overflow. CVE-2021-32280Medium 5.52021-09-20 An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allow… CVE-2020-21535Medium 5.52021-09-16 fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c. CVE-2020-21534Medium 5.52021-09-16 fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c. CVE-2020-21533Medium 5.52021-09-16 fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c. CVE-2020-21532Medium 5.52021-09-16 fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c. CVE-2020-21531Medium 5.52021-09-16 fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c. CVE-2020-21530Medium 5.52021-09-16 fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c. CVE-2020-21529Medium 5.52021-09-16 fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c. CVE-2019-19797Medium 5.52019-12-15 read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19555Medium 5.52019-12-04 read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. CVE-2019-14275Medium 5.52019-07-26 Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. CVE-2017-16899High 7.12017-11-20 An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a malicio…