SUSE SLED15 / SLES15 Security Update : transfig (SUSE-SU-2025:01835-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01835-2 advisory. Update to fig2dev version 3.2.9a - CVE-2025-31162: Fixed a floating point exception in fig2dev in getslope...

TencentOS Server 4: transfig (TSSA-2025:0488)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0488 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

SUSE SLES12 Security Update : transfig (SUSE-SU-2025:01890-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01890-1 advisory. Update to fig2dev version 3.2.9a - CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezierspline function bsc1243260. -...

CVE-2025-46399

In xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at gengeitpspline function...

CVE-2025-46399

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

CVE-2025-46399

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13152 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:12+00:00| seen| https://t.me/cvedetector/23619...

CVE-2025-46399

CVE-2025-46399 affects fig2dev (part of transfig) with a segmentation fault in genge_itp_spline, enabling local input-based disruption and potential denial of service. Related advisories confirm multiple vendors acknowledge the issue; Debian LTS reports a fix in fig2dev 1:3.2.8-3+deb11u3. Other e...

CVE-2025-46399 Xfig: transfig: fig2dev segmentation fault vulnerability

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...