https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 00:42:15 +0000 https://vulnerability.circl.lu/vuln/cve-2020-21680 <p>A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.</p> <p>A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.</p> https://vulnerability.circl.lu/vuln/cve-2020-21680 https://vulnerability.circl.lu/vuln/usn-7587-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: fig2dev, Ubuntu:Pro:20.04:LTS: fig2dev, Ubuntu:Pro:22.04:LTS: fig2dev, Ubuntu:Pro:24.04:LTS: fig2dev</p> <p>Suhwan Song discovered that Fig2dev did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-21680, CVE-2020-21682, CVE-2020-21683)</p> <p>It was discovered that Fig2dev did not limit the size of certain inputs. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2025-31162, CVE-2025-31163)</p> <p>It was discovered that Fig2dev did not correctly handle certain inputs. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-31164)</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: fig2dev, Ubuntu:Pro:20.04:LTS: fig2dev, Ubuntu:Pro:22.04:LTS: fig2dev, Ubuntu:Pro:24.04:LTS: fig2dev</p> <p>Suhwan Song discovered that Fig2dev did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-21680, CVE-2020-21682, CVE-2020-21683)</p> <p>It was discovered that Fig2dev did not limit the size of certain inputs. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2025-31162, CVE-2025-31163)</p> <p>It was discovered that Fig2dev did not correctly handle certain inputs. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-31164)</p> https://vulnerability.circl.lu/vuln/usn-7587-1