Most recent entries from all

bdu:2025-12116

EUVD-2026-331266

fkie_cve-2025-46399

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.

GHSA-h5h2-cvc7-hm6x

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via genge_itp_spline function.

OESA-2025-1509 — transfig security update

Affected: openEuler:24.03-LTS: transfig

The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Security Fix(es):

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.(CVE-2025-46397)

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.(CVE-2025-46398)

In xfig diagramming tool, a segmentation fault in fig2dev allows memory corruption via local input manipulation at genge_itp_spline function.(CVE-2025-46399)

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.(CVE-2025-46400)

openSUSE-SU-2025:15155-1 — transfig-3.2.9a-3.1 on GA media

transfig-3.2.9a-3.1 on GA media

SUSE-SU-2025:01835-1 — Security update for transfig

Security update for transfig

Withdrawn: UBUNTU-CVE-2025-46399

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: fig2dev, Ubuntu:20.04:LTS: fig2dev, Ubuntu:22.04:LTS: fig2dev, Ubuntu:24.10: fig2dev, Ubuntu:24.04:LTS: fig2dev, Ubuntu:25.04: fig2dev

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via genge_itp_spline function.