Every CVE Search/ Get API key

CVE-2021-32280

An issue was discovered in fig2dev through 20200520. A NULL pointer dereference exists in the...

5.5 MediumFix available

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.98%Up 0.5 points since Sep 21, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Record
CVE-2021-32280
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Record
CVE-2021-32280
Updated
2026-11-02
EUVDEUVD-2021-19135 No score

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Record
EUVD-2021-19135
Updated
2026-11-03
GitHub AdvisoriesGHSA-r6xp-8qhf-g8wc 5.5

An issue was discovered in fig2dev through 20200520. A NULL pointer dereference exists in the...

An issue was discovered in fig2dev through 20200520. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service.

Record
GHSA-r6xp-8qhf-g8wc
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 5.5

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Record
CVE-2021-32280
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-32280 5.5

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Record
DEBIAN-CVE-2021-32280
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVOESA-2021-1395 5.5

transfig security update

The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).

Security Fix(es):

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.(CVE-2021-32280)

Record
OESA-2021-1395
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-32280 5.5

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Record
UBUNTU-CVE-2021-32280
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:1439-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:1439-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1458-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:1458-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1481-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:1481-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3584-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
openSUSE-SU-2021:3584-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11595-1 No score

transfig-3.2.8b-2.1 on GA media

These are all security issues fixed in the transfig-3.2.8b-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11595-1
Updated
2026-11-02
OSVSUSE-SU-2021:14836-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
SUSE-SU-2021:14836-1
Updated
2026-11-02
OSVSUSE-SU-2021:3584-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
SUSE-SU-2021:3584-1
Updated
2026-11-02
OSVSUSE-SU-2021:3585-1 No score

Security update for transfig

This update for transfig fixes the following issues:

Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)

  • bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  • bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  • bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  • bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  • bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  • bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  • bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  • bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
Record
SUSE-SU-2021:3585-1
Updated
2026-11-02
OSVUSN-5864-1 No score

fig2dev vulnerabilities

Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-14275)

It was discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2019-19555, CVE-2019-19797, CVE-2020-21529, CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533, CVE-2020-21534, CVE-2020-21535, CVE-2020-21675, CVE-2020-21676, CVE-2021-3561)

It was discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-32280)

Record
USN-5864-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fig2dev
Debian:12
 before 1:3.2.7b-5
1:3.2.7b-5
fig2dev
Debian:13
 before 1:3.2.7b-5
1:3.2.7b-5
fig2dev
Debian:14
 before 1:3.2.7b-5
1:3.2.7b-5
fig2dev
Debian:9
From an advisory covering 12 CVEs
 before 1:3.2.6a-2+deb9u4, plus listed versions
1:3.2.6a-21:3.2.6a-2+deb9u11:3.2.6a-2+deb9u21:3.2.6a-2+deb9u3
1:3.2.6a-2+deb9u4
fig2dev
Debian:10
From an advisory covering 5 CVEs
 before 1:3.2.7a-5+deb10u5, plus listed versions
1:3.2.7a-51:3.2.7a-5+deb10u11:3.2.7a-5+deb10u21:3.2.7a-5+deb10u31:3.2.7a-5+deb10u4
1:3.2.7a-5+deb10u5
transfig
openEuler:20.03-LTS-SP1
 before 3.2.6a-7.oe1
3.2.6a-7.oe1
transfig
openEuler:20.03-LTS-SP2
 before 3.2.6a-7.oe1
3.2.6a-7.oe1
transfig
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 8 CVEs
 before 3.2.8b-160.16.2
3.2.8b-160.16.2
transfig
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 8 CVEs
 before 3.2.8b-160.16.2
3.2.8b-160.16.2
transfig
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 12 CVEs
 before 3.2.8b-4.15.1
3.2.8b-4.15.1
Show 26 moreShow less
Affected packages
PackageAffectedFixed
transfig
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 12 CVEs
 before 3.2.8b-4.15.1
3.2.8b-4.15.1
transfig
SUSE:HPE Helion OpenStack 8
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud 8
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud 9
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 3.2.8b-2.20.1
3.2.8b-2.20.1
transfig
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:3.2.5.e-41:3.2.5.e-51:3.2.5.e-5ubuntu0.1
 None known
xfig
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:3.2.5.c-51:3.2.5.c-61:3.2.5.c-7
 None known
fig2dev
Ubuntu:18.04:LTS
 before 1:3.2.6a-6ubuntu1.1, plus listed versions
1:3.2.6a-31:3.2.6a-41:3.2.6a-4ubuntu11:3.2.6a-6ubuntu1
1:3.2.6a-6ubuntu1.1
fig2dev
Ubuntu:20.04:LTS
 before 1:3.2.7a-7ubuntu0.1, plus listed versions
1:3.2.7a-7
1:3.2.7a-7ubuntu0.1
fig2dev
Ubuntu:18.04:LTS
From an advisory covering 14 CVEs
 before 1:3.2.6a-6ubuntu1.1, plus listed versions
1:3.2.6a-31:3.2.6a-41:3.2.6a-4ubuntu11:3.2.6a-6ubuntu1
1:3.2.6a-6ubuntu1.1
fig2dev
Ubuntu:20.04:LTS
From an advisory covering 14 CVEs
 before 1:3.2.7a-7ubuntu0.1, plus listed versions
1:3.2.7a-7
1:3.2.7a-7ubuntu0.1
transfig
openSUSE:Leap 15.2
From an advisory covering 12 CVEs
 before 3.2.8b-lp152.6.9.1
3.2.8b-lp152.6.9.1
transfig
SUSE:Package Hub 15 SP2
From an advisory covering 12 CVEs
 before 3.2.8b-bp152.3.6.2
3.2.8b-bp152.3.6.2
transfig
SUSE:Package Hub 15 SP3
From an advisory covering 12 CVEs
 before 3.2.8b-bp153.3.6.3
3.2.8b-bp153.3.6.3
transfig
openSUSE:Leap 15.3
From an advisory covering 12 CVEs
 before 3.2.8b-bp153.3.6.3
3.2.8b-bp153.3.6.3
transfig
openSUSE:Leap 15.3
From an advisory covering 12 CVEs
 before 3.2.8b-4.15.1
3.2.8b-4.15.1
transfig
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 3.2.8b-2.1
3.2.8b-2.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-32280 is a medium vulnerability (CVSS 5.5) in Xfig Project Fig2dev, published September 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in fig2dev 1:3.2.7b-5.

References

Show 49 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open