PatchTheCVEfig2dev vulnerabilities and fixes
Recent CVEs affecting fig2dev, with upgrade or downgrade steps. 7 tracked.
fig2dev has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-23. Highest priority: CVE-2025-46397 (score 43/100).
- CVE-2025-46400 MEDIUM 5.5 DOWNGRADE MITIGATE In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via lo
- CVE-2025-46399 MEDIUM 5.5 DOWNGRADE MITIGATE A flaw was found in fig2dev
- CVE-2025-46398 MEDIUM 5.5 DOWNGRADE MITIGATE In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input mani
- CVE-2025-46397 HIGH 7.8 DOWNGRADE MITIGATE A flaw was found in xfig
- CVE-2025-31164 MEDIUM 6.6 DOWNGRADE heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulat
- CVE-2025-31163 MEDIUM 6.6 DOWNGRADE Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulatio
- CVE-2025-31162 MEDIUM 6.6 DOWNGRADE Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manip
FAQ
How do I fix fig2dev vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fig2dev being exploited right now?
None of the tracked fig2dev CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fig2dev CVE should I patch first?
CVE-2025-46397 currently ranks highest (43/100): A flaw was found in xfig.