Read the docs

xfig

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

xfig records in CISA KEV

No xfig vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xfig 4 records MEDIUM

Records

7 records

TI-2025-22408 CVE-2025-31162 · GHSA-2c99-hrrc-j3vh

fig2dev float point exception

Priority MEDIUM 62

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00196 Published 2025-03-28 No fix listed CWE-369
TI-2009-04011 CVE-2009-4227 · GHSA-3pwv-p24f-xm44

Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig…

Priority MEDIUM 43

Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attacke…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.11499 Published 2009-12-08 Will not fix CWE-119
TI-2025-22410 CVE-2025-31164 · GHSA-p47h-x29h-rvvm

fig2dev heap-buffer overflow

Priority LOW 29

heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00216 Published 2025-03-28 No fix listed CWE-122
TI-2025-22409 CVE-2025-31163 · GHSA-gphp-6r8r-qhcw

fig2dev segmentation fault

Priority LOW 29

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00196 Published 2025-03-28 No fix listed CWE-476
Open these records in search →