fig2dev_project has 4 CVEs on record. The median CVSS is 5.5 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-46397High· 7.8A flaw was found in xfig43CVE-2025-46400Medium· 5.5In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.30CVE-2025-46399Medium· 5.5A flaw was found in fig2dev30CVE-2025-46398Medium· 5.5In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.30
fig2dev_project vulnerabilities
CVEs affecting fig2dev_project, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2025-46400Medium· 5.5In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.
In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.
CVE-2025-46399Medium· 5.5A flaw was found in fig2dev
A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.
CVE-2025-46398Medium· 5.5In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.
In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.
CVE-2025-46397High· 7.8A flaw was found in xfig
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.