TI-2021-17373 CVE-2021-40241 · GHSA-m4gh-3245-h724
xfig 3.2.7 is vulnerable to Buffer Overflow.
Priority HIGH 82
xfig 3.2.7 is vulnerable to Buffer Overflow.
Xfig Project
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Xfig Project records in CISA KEVNo Xfig Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Xfig · all components
TI-2017-12441 CVE-2017-16899 · GHSA-6jhq-gx6q-28qv
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to…
Priority LOW 34
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font valu…
TI-2019-14095 CVE-2019-19555 · GHSA-w4j4-88w2-32g6
read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
Priority LOW 27
read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
TI-2023-24660 CVE-2023-45920 · GHSA-57m4-vwwv-mmqr
Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling…
Priority LOW 19
Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints().