TI-2023-24707 CVE-2023-46045 · GHSA-xpmp-64jj-f5gg
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted…
Priority HIGH 69
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file.
Graphviz
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Graphviz records in CISA KEVNo Graphviz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2014-00940 CVE-2014-1236 · GHSA-694q-c7vf-rw87
Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz…
Priority MEDIUM 52
Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."
TI-2014-00896 CVE-2014-0978 · GHSA-m2jh-3vm2-49rv
Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz…
Priority MEDIUM 48
Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.
TI-2019-08239 CVE-2019-11023 · GHSA-5j8x-q537-j965
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a…
Priority MEDIUM 46
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
TI-2008-04345 CVE-2008-4555 · GHSA-j3qg-vccx-mj8v
Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in…
Priority MEDIUM 45
Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corrupt…
TI-2014-07431 CVE-2014-9157 · GHSA-h5f2-wwmp-f73m
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz…
Priority MEDIUM 41
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in a…
TI-2020-13300 CVE-2020-18032 · GHSA-92qh-4rf3-8x2m
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier…
Priority LOW 39
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into…
TI-2014-00939 CVE-2014-1235 · GHSA-w89c-3qr4-xm84
Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote…
Priority LOW 39
Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file.
TI-2019-07279 CVE-2019-9904 · GHSA-wqh3-2wqg-rq54
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1.
Priority LOW 34
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1.
TI-2018-07229 CVE-2018-10196 · GHSA-9jm3-9x6p-8q48
NULL pointer dereference vulnerability in the rebuild_vlists function in…
Priority LOW 28
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted f…
TI-2005-04533 CVE-2005-4803 · GHSA-mfg4-vc2f-7p24
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink…
Priority LOW 17
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.