CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c. |
| 16/09/2021 |
| CVE-2020-21534 | MITTEL5.5 | fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c. | 16/09/2021 |
| CVE-2020-21533 | MITTEL5.5 | fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c. | 16/09/2021 |
| CVE-2020-21532 | MITTEL5.5 | fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c. | 16/09/2021 |
| CVE-2020-21531 | MITTEL5.5 | fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c. | 16/09/2021 |
| CVE-2020-21530 | MITTEL5.5 | fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c. | 16/09/2021 |
| CVE-2020-21529 | MITTEL5.5 | fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c. | 16/09/2021 |
| CVE-2019-19797 | MITTEL5.5 | read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. | 15/12/2019 |
| CVE-2019-19555 | MITTEL5.5 | read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. | 04/12/2019 |
| CVE-2019-14275 | MITTEL5.5 | Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. | 26/07/2019 |
| CVE-2017-16899 | HOCH7.1 | An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c. | 20/11/2017 |