{"id":"CVE-2025-46400","aliases":["ALPINE-CVE-2025-46400","DEBIAN-CVE-2025-46400","DLA-4147-1","EUVD-2025-12161","GHSA-45rh-35p3-x338","MGASA-2025-0253","OESA-2025-1509","OESA-2025-1510","OESA-2025-1947","OESA-2025-1948","OESA-2025-1949","SUSE-SU-2025:01835-1","SUSE-SU-2025:01835-2","SUSE-SU-2025:01890-1","openSUSE-SU-2025:15155-1"],"status":"published","title":"Xfig: fig2dev segmentation fault in read_arcobject","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00246,"percentile":0.15929,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-04-23T20:55:17Z","modified":"2026-11-05T16:17:16Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"fig2dev","fixed_in":["3.2.9a-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"fig2dev","fixed_in":["3.2.9a-r3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"fig2dev","fixed_in":["1:3.2.8b-3+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"fig2dev","fixed_in":["1:3.2.9a-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"fig2dev","fixed_in":["1:3.2.9a-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-r3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8b-3+deb12u2"}]}],"versions":["1:3.2.8b-3","1:3.2.8b-3+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.9a-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.9a-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"fig2dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8-3+deb11u3"}]}],"versions":["1:3.2.8-3","1:3.2.8-3+deb11u1","1:3.2.8-3+deb11u2"],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-1.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9-3.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9-3.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-4.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-4.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-4.oe2203sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-150600.3.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8b-2.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"transfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9a-3.1"}]}],"bundled":4}],"products":[{"vendor":"fig2dev_project","product":"fig2dev"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-46400","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362054","tags":["issue-tracking","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://sourceforge.net/p/mcj/tickets/187/","tags":["Exploit","Issue Tracking","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00043.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46400","tags":["advisory"]},{"url":"https://sourceforge.net/p/mcj/tickets/187"},{"url":"https://github.com/advisories/GHSA-45rh-35p3-x338"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-46400","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-46400","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0253.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34309","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZDNSWLCQENGSN2O2GVDL64VL52AR7HAU/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46399","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1510","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1947","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1948","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1949","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501835-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225947","tags":["report"]},{"url":"https://bugzilla.suse.com/1230427","tags":["report"]},{"url":"https://bugzilla.suse.com/1240379","tags":["report"]},{"url":"https://bugzilla.suse.com/1240380","tags":["report"]},{"url":"https://bugzilla.suse.com/1240381","tags":["report"]},{"url":"https://bugzilla.suse.com/1243260","tags":["report"]},{"url":"https://bugzilla.suse.com/1243261","tags":["report"]},{"url":"https://bugzilla.suse.com/1243262","tags":["report"]},{"url":"https://bugzilla.suse.com/1243263","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46400","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501835-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501890-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZDNSWLCQENGSN2O2GVDL64VL52AR7HAU/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-46400","title":"Xfig: fig2dev segmentation fault in read_arcobject","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T20:55:17.239Z","modified":"2026-11-05T15:49:11.795Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-12161","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T20:55:17Z","modified":"2026-11-05T15:49:11Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-05T18:00:59.460287Z"}],"ghsa":[{"id":"GHSA-45rh-35p3-x338","title":"Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local...","description":"Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T21:30:36Z","modified":"2025-11-03T21:33:42Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:23.26783Z"}],"nvd":[{"id":"CVE-2025-46400","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T21:15:17.25Z","modified":"2026-11-05T16:17:16.173Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"ALPINE-CVE-2025-46400","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T21:15:17.25Z","modified":"2026-11-03T06:33:00.550271317Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"CVE-2025-46400","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T21:15:17.25Z","modified":"2026-04-16T04:31:27.561093323Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"DEBIAN-CVE-2025-46400","description":"In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.","status":"published","published":"2025-04-23T21:15:17.25Z","modified":"2026-09-01T20:05:52.765950261Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1509","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)\n\nIn xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)\n\nIn xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)","status":"published","published":"2025-05-16T11:08:36Z","modified":"2026-08-18T01:17:57.603618818Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1510","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)\n\nIn xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)\n\nIn xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)","status":"published","published":"2025-05-16T11:08:36Z","modified":"2026-08-18T01:17:57.704819962Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1947","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)\n\nIn xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)\n\nIn xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)","status":"published","published":"2025-08-01T11:09:01Z","modified":"2026-08-18T01:18:56.34343804Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1948","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)\n\nIn xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)\n\nIn xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:56.402357939Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1949","title":"transfig security update","description":"The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)).  Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments).\r\n\r\nSecurity Fix(es):\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)\n\nIn xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)\n\nIn xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)\n\nIn xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)","status":"published","published":"2025-08-01T11:09:02Z","modified":"2026-08-18T01:18:55.948408114Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"DLA-4147-1","title":"fig2dev - security update","status":"published","published":"2025-04-30T00:00:00Z","modified":"2026-03-09T01:21:35.494355Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0253","title":"Updated transfig packages fix security vulnerabilities","description":"fig2dev stack-overflow. (CVE-2025-46397)\nfig2dev stack-overflow via read_objects. (CVE-2025-46398)\nfig2dev segmentation fault vulnerability. (CVE-2025-46399)\nfig2dev segmentation fault in read_arcobject. (CVE-2025-46400)\n","status":"published","published":"2025-10-31T23:36:04Z","modified":"2026-04-16T04:42:37.721511081Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15155-1","title":"transfig-3.2.9a-3.1 on GA media","description":"These are all security issues fixed in the transfig-3.2.9a-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-23T00:00:00Z","modified":"2026-03-23T04:53:24.866914Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01835-1","title":"Security update for transfig","description":"This update for transfig fixes the following issues:\n\nUpdate to fig2dev version 3.2.9a\n\n- CVE-2025-31162: Fixed a floating point exception in fig2dev in get_slope function (bsc#1240380).\n- CVE-2025-31163: Fixed a segmentation fault in fig2dev in put_patternarc function (bsc#1240381).\n- CVE-2025-31164: Fixed a heap buffer overflow in fig2dev in create_line_with_spline function (bsc#1240379).\n- CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezier_spline function (bsc#1243260).\n- CVE-2025-46398: Fixed a stack buffer overflow in fig2dev in read_objects function (bsc#1243262).\n- CVE-2025-46399: Fixed a segmentation fault in fig2dev in genge_itp_spline function (bsc#1243263).\n- CVE-2025-46400: Fixed a segmentation fault in fig2dev in read_arcobject function (bsc#1243261).\n","status":"published","published":"2025-06-09T13:24:44Z","modified":"2026-02-04T02:16:32.714759Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01835-2","title":"Security update for transfig","description":"This update for transfig fixes the following issues:\n\nUpdate to fig2dev version 3.2.9a\n\n- CVE-2025-31162: Fixed a floating point exception in fig2dev in get_slope function (bsc#1240380).\n- CVE-2025-31163: Fixed a segmentation fault in fig2dev in put_patternarc function (bsc#1240381).\n- CVE-2025-31164: Fixed a heap buffer overflow in fig2dev in create_line_with_spline function (bsc#1240379).\n- CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezier_spline function (bsc#1243260).\n- CVE-2025-46398: Fixed a stack buffer overflow in fig2dev in read_objects function (bsc#1243262).\n- CVE-2025-46399: Fixed a segmentation fault in fig2dev in genge_itp_spline function (bsc#1243263).\n- CVE-2025-46400: Fixed a segmentation fault in fig2dev in read_arcobject function (bsc#1243261).\n","status":"published","published":"2025-07-16T14:52:18Z","modified":"2026-03-23T04:49:32.236056Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01890-1","title":"Security update for transfig","description":"This update for transfig fixes the following issues:\n\nUpdate to fig2dev version 3.2.9a\n\n- CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezier_spline function (bsc#1243260).\n- CVE-2025-46398: Fixed a stack buffer overflow in fig2dev in read_objects function (bsc#1243262).\n- CVE-2025-46399: Fixed a segmentation fault in fig2dev in genge_itp_spline function (bsc#1243263).\n- CVE-2025-46400: Fixed a segmentation fault in fig2dev in read_arcobject function (bsc#1243261).\n","status":"published","published":"2025-06-11T05:43:46Z","modified":"2026-02-04T03:11:41.571379Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}