Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Xfig Project records in CISA KEVNo Xfig Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 27
An issue was discovered in fig2dev before 3.2.8..
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00981 · Published 2021-09-20 · Will not fix CWE-476
Priority LOW 27
fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00891 · Published 2021-09-16 · Will not fix CWE-125
Priority LOW 27
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01078 · Published 2021-09-16 · Will not fix CWE-120
Priority LOW 27
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01062 · Published 2021-09-16 · Will not fix CWE-120
Priority LOW 27
fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0109 · Published 2021-09-16 · Will not fix CWE-787
Priority LOW 27
read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01173 · Published 2019-12-15 · Will not fix CWE-787
Priority LOW 27
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01241 · Published 2019-07-26 · Fix deferred CWE-787
Priority LOW 26
fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00866 · Published 2021-09-16 · Will not fix CWE-120
Priority LOW 26
fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00866 · Published 2021-09-16 · Will not fix CWE-787
Priority LOW 26
fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00716 · Published 2021-09-16 · Will not fix
Open these records in search →