Vulnerabilities > Fig2Dev Project > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-12-12 CVE-2019-19746 Integer Overflow or Wraparound vulnerability in multiple products
make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.
local
low complexity
fig2dev-project fedoraproject CWE-190
5.5
2018-08-30 CVE-2018-16140 Out-of-bounds Write vulnerability in multiple products
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.
6.8