Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

🗓️ 27 Sep 2021 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 1 Views

Graphviz buffer overflow before f8b9e035 enables remote code execution or crash via crafted file.

Reporter	Title	Published	Views	Family All 101
Amazon	Medium: graphviz	13 Jul 202100:00	–	amazon
Tenable Nessus	Amazon Linux AMI : graphviz (ALAS-2021-1513)	13 Jul 202100:00	–	nessus
Tenable Nessus	AlmaLinux 8 : graphviz (ALSA-2021:4256)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : graphviz (CESA-2021:4256)	11 Nov 202100:00	–	nessus
Tenable Nessus	Debian DLA-2659-1 : graphviz security update	14 May 202100:00	–	nessus
Tenable Nessus	Debian DSA-4914-1 : graphviz - security update	14 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : graphviz (EulerOS-SA-2021-2296)	9 Aug 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : graphviz (EulerOS-SA-2021-2375)	14 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : graphviz (EulerOS-SA-2021-2498)	27 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : graphviz (EulerOS-SA-2021-2528)	27 Sep 202100:00	–	nessus

Vulners

Node

OR

microsoft azl3_graphviz_2.42.4-10Range<2.42.4-10

microsoft cbl2_graphviz_2.42.4-6Range<2.42.4-6

microsoft cm1_graphviz_2.42.4-5Range<2.42.4-5

microsoft azl3_graphviz_2.42.4-12Range<2.42.4-10

microsoft graphviz_lua_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_tcl_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_python3_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_perl_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_lua_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_graphs_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_gd_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_doc_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_devel_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_tcl_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_python3_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_perl_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_lua_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_graphs_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_gd_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_doc_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_devel_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_2.42.4_11.azl3Range<2.42.4-11

microsoft graphviz_debuginfo_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_tcl_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_python3_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_perl_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_lua_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_graphs_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_gd_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_doc_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_devel_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_debuginfo_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_tcl_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_python3_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_perl_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_lua_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_graphs_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_gd_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_doc_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_devel_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_2.42.4_6.cm2Range<2.42.4-6

microsoft graphviz_debuginfo_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_tcl_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_perl_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_lua_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_graphs_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_gd_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_doc_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_devel_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_debuginfo_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_tcl_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_perl_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_graphs_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_gd_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_doc_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_devel_2.42.4_5.cm1Range<2.42.4-5

microsoft graphviz_2.42.4_5.cm1Range<2.42.4-5

18 Feb 2026 11:12Current

7High risk

Vulners AI Score7

CVSS 26.8

CVSS 3.17.8

EPSS0.02608

graphviz buffer overflow commit f8b9e035 remote code execution crafted file shapes.c