Fig2dev (Xfig Project) - vulnerabilities (CVEs)

10 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2021-09-20. Vendor: Xfig Project.

CVEs of Fig2dev

• CVE-2021-32280 - CVSS 5.5 (medium), 2021-09-20: An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It…
• CVE-2020-21533 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
• CVE-2020-21535 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
• CVE-2020-21534 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
• CVE-2020-21530 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
• CVE-2020-21529 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
• CVE-2020-21532 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
• CVE-2020-21531 - CVSS 5.5 (medium), 2021-09-16: fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
• CVE-2019-19797 - CVSS 5.5 (medium), 2019-12-15: read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
• CVE-2019-14275 - CVSS 5.5 (medium), 2019-07-26: Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.