{"id":"CVE-2025-31164","aliases":["ALPINE-CVE-2025-31164","DEBIAN-CVE-2025-31164","DLA-4134-1","EUVD-2025-8632","GHSA-p47h-x29h-rvvm","MGASA-2025-0152","OESA-2025-1366","OESA-2025-1367","OESA-2025-1368","OESA-2025-1406","OESA-2025-1407","SUSE-SU-2025:01835-1","SUSE-SU-2025:01835-2","SUSE-SU-2025:1540-1","UBUNTU-CVE-2025-31164","USN-7587-1","openSUSE-SU-2025:15064-1"],"status":"published","title":"fig2dev heap-buffer overflow","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00216,"percentile":0.12232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2025-03-28T18:01:16Z","modified":"2026-11-03T06:33:00Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"fig2dev","fixed_in":["3.2.9a-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"fig2dev","fixed_in":["3.2.9a-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"fig2dev","fixed_in":["1:3.2.8b-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"fig2dev","fixed_in":["1:3.2.9a-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"fig2dev","fixed_in":["1:3.2.9a-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"fig2dev","fixed_in":["1:3.2.9-3ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8b-3+deb12u1"}]}],"versions":["1:3.2.8b-3"]},{"source":"osv","ecosystem":"Debian:13","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.9a-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.9a-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8-3+deb11u2"}]}],"versions":["1:3.2.8-3","1:3.2.8-3+deb11u1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-3.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9-2.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9-2.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-3.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-3.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-2.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.9-3ubuntu0.1~esm1"}]}],"versions":["1:3.2.8b-3","1:3.2.9-3","1:3.2.9-3build1","1:3.2.9-3build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.6a-6ubuntu1.1+esm1"}]}],"versions":["1:3.2.6a-3","1:3.2.6a-4","1:3.2.6a-4ubuntu1","1:3.2.6a-6ubuntu1","1:3.2.6a-6ubuntu1.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.7a-7ubuntu0.1+esm1"}]}],"versions":["1:3.2.7a-7","1:3.2.7a-7ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8b-1ubuntu0.1~esm1"}]}],"versions":["1:3.2.8-3","1:3.2.8b-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.9-3ubuntu0.1~esm1"}]}],"versions":["1:3.2.8b-3","1:3.2.9-3","1:3.2.9-3build1","1:3.2.9-3build2"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-2.1"}]}],"bundled":3}],"products":[{"vendor":"fig2dev_project","product":"fig2dev"},{"vendor":"xfig","product":"fig2dev"}],"references":[{"url":"https://sourceforge.net/p/mcj/tickets/184/","tags":["Exploit","Issue Tracking","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00030.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31164","tags":["advisory"]},{"url":"https://sourceforge.net/p/mcj/tickets/184"},{"url":"https://github.com/advisories/GHSA-p47h-x29h-rvvm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-31164","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-31164","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0152.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34260","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/MJCOBXBMU3EIKTUVVEJUQTIAIJY6GWXG/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31163","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1367","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1368","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1406","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1407","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501835-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225947","tags":["report"]},{"url":"https://bugzilla.suse.com/1230427","tags":["report"]},{"url":"https://bugzilla.suse.com/1240379","tags":["report"]},{"url":"https://bugzilla.suse.com/1240380","tags":["report"]},{"url":"https://bugzilla.suse.com/1240381","tags":["report"]},{"url":"https://bugzilla.suse.com/1243260","tags":["report"]},{"url":"https://bugzilla.suse.com/1243261","tags":["report"]},{"url":"https://bugzilla.suse.com/1243262","tags":["report"]},{"url":"https://bugzilla.suse.com/1243263","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46400","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501835-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251540-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-31164","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31164","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7587-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-21680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-21682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-21683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31163","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MJCOBXBMU3EIKTUVVEJUQTIAIJY6GWXG/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-31164","title":"fig2dev heap-buffer overflow","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:01:16.666Z","modified":"2025-11-03T19:48:05.584Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-8632","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:01:16Z","modified":"2025-11-03T19:48:05Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-p47h-x29h-rvvm","title":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local...","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:33:38Z","modified":"2025-11-03T21:34:14Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:04:23.841448Z"}],"nvd":[{"id":"CVE-2025-31164","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:15:18.313Z","modified":"2026-06-17T09:09:56.78Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:10:56.494516Z"}],"osv":[{"id":"ALPINE-CVE-2025-31164","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:15:18.313Z","modified":"2026-11-03T06:33:00.397750119Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"CVE-2025-31164","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:15:18.313Z","modified":"2026-04-16T04:36:38.61883077Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-31164","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:15:18.313Z","modified":"2026-09-01T20:05:45.709793892Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1366","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nFloating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.(CVE-2025-31162)\n\nSegmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.(CVE-2025-31163)\n\nheap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.(CVE-2025-31164)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.858543001Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1367","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nFloating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.(CVE-2025-31162)\n\nSegmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.(CVE-2025-31163)\n\nheap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.(CVE-2025-31164)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.990534386Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1368","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nFloating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.(CVE-2025-31162)\n\nSegmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.(CVE-2025-31163)\n\nheap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.(CVE-2025-31164)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.499052183Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1406","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nFloating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.(CVE-2025-31162)\n\nSegmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.(CVE-2025-31163)\n\nheap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.(CVE-2025-31164)","status":"published","published":"2025-04-11T11:08:30Z","modified":"2026-08-18T01:18:17.179675402Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1407","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nFloating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.(CVE-2025-31162)\n\nSegmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.(CVE-2025-31163)\n\nheap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.(CVE-2025-31164)","status":"published","published":"2025-04-11T11:08:30Z","modified":"2026-08-18T01:18:40.245732451Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-31164","description":"heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.","status":"published","published":"2025-03-28T18:15:00Z","modified":"2026-02-04T02:42:05.741835Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"DLA-4134-1","title":"fig2dev - security update","status":"published","published":"2025-04-21T00:00:00Z","modified":"2026-03-09T01:22:40.748506Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0152","title":"Updated transfig packages fix security vulnerabilities","description":"Floating point exception in fig2dev in version 3.2.9a allows an attacker\nto availability via local input manipulation via get_slope function.\n(CVE-2025-31162)\nSegmentation fault in fig2dev in version 3.2.9a allows an attacker to\navailability via local input manipulation via put_patternarc function.\n(CVE-2025-31163)\nHeap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to\navailability via local input manipulation via  create_line_with_spline.\n(CVE-2025-31164)\n","status":"published","published":"2025-05-11T04:42:54Z","modified":"2026-04-16T04:42:05.294812334Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15064-1","title":"transfig-3.2.9a-2.1 on GA media","description":"These are all security issues fixed in the transfig-3.2.9a-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:53:22.037726Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01835-1","title":"Security update for transfig","description":"This update for transfig fixes the following issues:\n\nUpdate to fig2dev version 3.2.9a\n\n- CVE-2025-31162: Fixed a floating point exception in fig2dev in get_slope function (bsc#1240380).\n- CVE-2025-31163: Fixed a segmentation fault in fig2dev in put_patternarc function (bsc#1240381).\n- CVE-2025-31164: Fixed a heap buffer overflow in fig2dev in create_line_with_spline function (bsc#1240379).\n- CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezier_spline function (bsc#1243260).\n- CVE-2025-46398: Fixed a stack buffer overflow in fig2dev in read_objects function (bsc#1243262).\n- CVE-2025-46399: Fixed a segmentation fault in fig2dev in genge_itp_spline function (bsc#1243263).\n- CVE-2025-46400: Fixed a segmentation fault in fig2dev in read_arcobject function (bsc#1243261).\n","status":"published","published":"2025-06-09T13:24:44Z","modified":"2026-02-04T02:16:32.714759Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01835-2","title":"Security update for transfig","description":"This update for transfig fixes the following issues:\n\nUpdate to fig2dev version 3.2.9a\n\n- CVE-2025-31162: Fixed a floating point exception in fig2dev in get_slope function (bsc#1240380).\n- CVE-2025-31163: Fixed a segmentation fault in fig2dev in put_patternarc function (bsc#1240381).\n- CVE-2025-31164: Fixed a heap buffer overflow in fig2dev in create_line_with_spline function (bsc#1240379).\n- CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezier_spline function (bsc#1243260).\n- CVE-2025-46398: Fixed a stack buffer overflow in fig2dev in read_objects function (bsc#1243262).\n- CVE-2025-46399: Fixed a segmentation fault in fig2dev in genge_itp_spline function (bsc#1243263).\n- CVE-2025-46400: Fixed a segmentation fault in fig2dev in read_arcobject function (bsc#1243261).\n","status":"published","published":"2025-07-16T14:52:18Z","modified":"2026-03-23T04:49:32.236056Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1540-1","title":"Security update for transfig","description":"This update for transfig fixes the following issues:\n\n- CVE-2025-31164: Fixed heap-buffer overflow in fig2dev create_line_with_spline() function (bsc#1240379)\n- CVE-2025-31162: Fixed floating point exception in fig2dev get_slope() function (bsc#1240380)\n- CVE-2025-31163: Fixed segmentation fault in fig2dev put_patternarc() function (bsc#1240381)\n","status":"published","published":"2025-05-13T08:54:18Z","modified":"2026-03-23T04:50:39.625703Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7587-1","title":"fig2dev vulnerabilities","description":"Suhwan Song discovered that Fig2dev did not correctly handle certain\nmemory operations. If a user or automated system were tricked into\nopening a specially crafted file, an attacker could possibly use this\nissue to cause a denial of service. This issue only affected\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-21680, CVE-2020-21682,\nCVE-2020-21683)\n\nIt was discovered that Fig2dev did not limit the size of certain inputs.\nIf a user or automated system were tricked into opening a specially\ncrafted file, an attacker could possibly use this issue to cause a\ndenial of service. (CVE-2025-31162, CVE-2025-31163)\n\nIt was discovered that Fig2dev did not correctly handle certain inputs.\nIf a user or automated system were tricked into opening a specially\ncrafted file, an attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 24.04 LTS and\nUbuntu 24.10. (CVE-2025-31164)","status":"published","published":"2025-06-23T02:35:06Z","modified":"2026-04-27T18:17:07.977982418Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}