Every CVE Search/ Get API key

CVE-2020-21532

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

5.5 MediumFix available

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.08%Up 0.7 points since Sep 17, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
CVE-2020-21532
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-120
Updated
2026-11-02
CVE List No score

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
CVE-2020-21532
Updated
2026-11-02
EUVDEUVD-2020-14300 No score

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
EUVD-2020-14300
Updated
2026-11-03
GitHub AdvisoriesGHSA-6hvv-7cqc-pvf5 5.5

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
GHSA-6hvv-7cqc-pvf5
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-120
Updated
2026-11-02
OSV 5.5

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
CVE-2020-21532
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-21532 5.5

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
DEBIAN-CVE-2020-21532
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVUBUNTU-CVE-2020-21532 5.5

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

Record
UBUNTU-CVE-2020-21532
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:1439-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:1439-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1458-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:1458-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1481-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:1481-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3584-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
openSUSE-SU-2021:3584-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11595-1 No score

transfig-3.2.8b-2.1 on GA media

These are all security issues fixed in the transfig-3.2.8b-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11595-1
Updated
2026-11-02
OSVSUSE-SU-2021:14836-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
SUSE-SU-2021:14836-1
Updated
2026-11-02
OSVSUSE-SU-2021:3584-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
SUSE-SU-2021:3584-1
Updated
2026-11-02
OSVSUSE-SU-2021:3585-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
SUSE-SU-2021:3585-1
Updated
2026-11-02
OSVUSN-5864-1 No score

fig2dev vulnerabilities

Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-14275)

It was discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2019-19555, CVE-2019-19797, CVE-2020-21529, CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533, CVE-2020-21534, CVE-2020-21535, CVE-2020-21675, CVE-2020-21676, CVE-2021-3561)

It was discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-32280)

Record
USN-5864-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fig2dev
Debian:12
 before 1:3.2.8-1
1:3.2.8-1
fig2dev
Debian:13
 before 1:3.2.8-1
1:3.2.8-1
fig2dev
Debian:14
 before 1:3.2.8-1
1:3.2.8-1
fig2dev
Debian:9
From an advisory covering 12 CVEs
 before 1:3.2.6a-2+deb9u4, plus listed versions
1:3.2.6a-21:3.2.6a-2+deb9u11:3.2.6a-2+deb9u21:3.2.6a-2+deb9u3
1:3.2.6a-2+deb9u4
fig2dev
Debian:10
From an advisory covering 5 CVEs
 before 1:3.2.7a-5+deb10u5, plus listed versions
1:3.2.7a-51:3.2.7a-5+deb10u11:3.2.7a-5+deb10u21:3.2.7a-5+deb10u31:3.2.7a-5+deb10u4
1:3.2.7a-5+deb10u5
transfig
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 8 CVEs
 before 3.2.8b-160.16.2
3.2.8b-160.16.2
transfig
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 8 CVEs
 before 3.2.8b-160.16.2
3.2.8b-160.16.2
transfig
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 12 CVEs
 before 3.2.8b-4.15.1
3.2.8b-4.15.1
transfig
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 12 CVEs
 before 3.2.8b-4.15.1
3.2.8b-4.15.1
transfig
SUSE:HPE Helion OpenStack 8
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
Show 23 moreShow less
Affected packages
PackageAffectedFixed
transfig
SUSE:OpenStack Cloud 8
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud 9
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:3.2.5.e-41:3.2.5.e-51:3.2.5.e-5ubuntu0.1
 None known
fig2dev
Ubuntu:18.04:LTS
 before 1:3.2.6a-6ubuntu1.1, plus listed versions
1:3.2.6a-31:3.2.6a-41:3.2.6a-4ubuntu11:3.2.6a-6ubuntu1
1:3.2.6a-6ubuntu1.1
fig2dev
Ubuntu:20.04:LTS
 before 1:3.2.7a-7ubuntu0.1, plus listed versions
1:3.2.7a-7
1:3.2.7a-7ubuntu0.1
fig2dev
Ubuntu:18.04:LTS
From an advisory covering 14 CVEs
 before 1:3.2.6a-6ubuntu1.1, plus listed versions
1:3.2.6a-31:3.2.6a-41:3.2.6a-4ubuntu11:3.2.6a-6ubuntu1
1:3.2.6a-6ubuntu1.1
fig2dev
Ubuntu:20.04:LTS
From an advisory covering 14 CVEs
 before 1:3.2.7a-7ubuntu0.1, plus listed versions
1:3.2.7a-7
1:3.2.7a-7ubuntu0.1
transfig
openSUSE:Leap 15.2
From an advisory covering 12 CVEs
 before 3.2.8b-lp152.6.9.1
3.2.8b-lp152.6.9.1
transfig
SUSE:Package Hub 15 SP2
From an advisory covering 12 CVEs
 before 3.2.8b-bp152.3.6.2
3.2.8b-bp152.3.6.2
transfig
SUSE:Package Hub 15 SP3
From an advisory covering 12 CVEs
 before 3.2.8b-bp153.3.6.3
3.2.8b-bp153.3.6.3
transfig
openSUSE:Leap 15.3
From an advisory covering 12 CVEs
 before 3.2.8b-bp153.3.6.3
3.2.8b-bp153.3.6.3
transfig
openSUSE:Leap 15.3
From an advisory covering 12 CVEs
 before 3.2.8b-4.15.1
3.2.8b-4.15.1
transfig
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 3.2.8b-2.1
3.2.8b-2.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-21532 is a medium vulnerability (CVSS 5.5) in Xfig Project Fig2dev, published September 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in fig2dev 1:3.2.8-1.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open