Xfig Project vulnerabilities

Products

• Fig2dev 10
• Xfig 4

Newest

• xfig project xfig Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE... CVE-2023-45920 Fix availableDisputed 4.2 MediumMarch 27, 2024
• xfig project xfig xfig 3.2.7 is vulnerable to Buffer Overflow. CVE-2021-40241 Fix available 9.8 CriticalOctober 31, 2022
• xfig project fig2dev, debian linux +1 more An issue was discovered in fig2dev through 20200520. A NULL pointer dereference exists in the... CVE-2021-32280 Fix available 5.5 MediumSeptember 20, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c. CVE-2020-21535 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c. CVE-2020-21534 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c. CVE-2020-21533 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c. CVE-2020-21530 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c. CVE-2020-21532 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c. CVE-2020-21531 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux +1 more fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c. CVE-2020-21529 Fix available 5.5 MediumSeptember 16, 2021
• xfig project fig2dev, debian linux, fedoraproject fedora +2 more read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CVE-2019-19797 Fix available 5.5 MediumDecember 15, 2019
• xfig project xfig read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an... CVE-2019-19555 Fix available 5.5 MediumDecember 4, 2019
• xfig project fig2dev, debian linux, opensuse leap +2 more Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. CVE-2019-14275 Fix available 5.5 MediumJuly 26, 2019
• xfig project xfig, debian linux +1 more An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a... CVE-2017-16899 Fix available 7.1 HighNovember 20, 2017