Vulnerabilities > Graphviz > Graphviz > 2.40.1

DATE CVE VULNERABILITY TITLE RISK
2024-02-02 CVE-2023-46045 Out-of-bounds Read vulnerability in Graphviz
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file.
local
low complexity
graphviz CWE-125
7.8
2021-04-29 CVE-2020-18032 Classic Buffer Overflow vulnerability in multiple products
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
local
low complexity
graphviz debian fedoraproject CWE-120
7.8
2019-03-21 CVE-2019-9904 Uncontrolled Recursion vulnerability in Graphviz 2.40.1
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1.
network
low complexity
graphviz CWE-674
6.5
2018-05-30 CVE-2018-10196 NULL Pointer Dereference vulnerability in multiple products
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
local
low complexity
graphviz fedoraproject canonical CWE-476
5.5