https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:08:43.772366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:0700 ALSA-2026:0700 — Moderate: transfig security update 2026-10-02T22:08:43.783651+00:00

Affected: AlmaLinux:9: transfig

The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.

Security Fix(es):

* xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-11851 bdu:2025-11851 2026-10-02T22:08:43.783706+00:00 bdu:2025-11851 https://cve.radiocsirt.org/vuln/euvd-2026-331264 EUVD-2026-331264 2026-10-02T22:08:43.783728+00:00 EUVD-2026-331264 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46397 fkie_cve-2025-46397 2026-10-02T22:08:43.783740+00:00

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

 https://cve.radiocsirt.org/vuln/ghsa-fqm9-qqwf-gq9r GHSA-fqm9-qqwf-gq9r 2026-10-02T22:08:43.783760+00:00

Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function.

 https://cve.radiocsirt.org/vuln/oesa-2025-1509 OESA-2025-1509 — transfig security update 2026-10-02T22:08:43.783775+00:00

Affected: openEuler:24.03-LTS: transfig

The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Security Fix(es):

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)

In xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15155-1 openSUSE-SU-2025:15155-1 — transfig-3.2.9a-3.1 on GA media 2026-10-02T22:08:43.783802+00:00

transfig-3.2.9a-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:0705 RHSA-2026:0705 — Red Hat Security Advisory: transfig security update 2026-10-02T22:08:43.783819+00:00

xfig: xfig: Stack-overflow allows possible code execution via local input manipulation

 https://cve.radiocsirt.org/vuln/suse-su-2025:01835-1 SUSE-SU-2025:01835-1 — Security update for transfig 2026-10-02T22:08:43.783832+00:00

Security update for transfig

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-46397 Withdrawn: UBUNTU-CVE-2025-46397 2026-10-02T22:08:43.783846+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: fig2dev, Ubuntu:20.04:LTS: fig2dev, Ubuntu:22.04:LTS: fig2dev, Ubuntu:24.10: fig2dev, Ubuntu:24.04:LTS: fig2dev, Ubuntu:25.04: fig2dev

Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0125 WID-SEC-W-2026-0125 — Red Hat Enterprise Linux (transfig): Schwachstelle ermöglicht Codeausführung 2026-10-02T22:08:43.783870+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux im transfig Paket ausnutzen, um beliebigen Programmcode auszuführen.