CVE-2019-19555

CVE-2019-19555 : In Xfig fig2dev 3.2.7b, read_textobject in read.c suffers a stack-based buffer overflow caused by an incorrect sscanf. Public sources (Ubuntu, SUSE, Red Hat advisories) reference this CVE among multiple Fig2dev issues; exploitation details are not provided in the documents. Some ...

CVE-2021-40241

CVE-2021-40241 affects xfig 3.2.7, with a potential buffer overflow in src/w_help.c at line 55 due to getenv("LANG"). Debain/Mageia advisories document the vulnerability and provide a fixed package version: Debian 10 uses xfig 1:3.2.7a-3+deb10u1; Mageia/OSV entries reference a security update. Th...

CVE-2023-45920

The Xfig charting tool version v3.2.8 contains a NULL pointer dereference vulnerability triggered during a call to XGetWMHints() . While the specific impact is disputed because applications are generally expected to fail under anomalous X server behavior, the flaw has been addressed in various di...

CVE-2017-16899

CVE-2017-16899 affects the Xfig figure conversion tool (fig2dev) in the fig2dev program, with an array index error related to a negative font value in dev/gentikz.c and in the read_textobject routines (read.c and read1_3.c). The vulnerability can allow remote attackers to cause a denial-of-servic...