PatchTheCVEfig2dev project vulnerabilities
Recent CVEs affecting fig2dev project products. 7 tracked.
fig2dev project has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-23. Highest priority: CVE-2025-46397 (score 43/100).
- CVE-2025-46400 MEDIUM 5.5 DOWNGRADE MITIGATE In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via lo
- CVE-2025-46399 MEDIUM 5.5 DOWNGRADE MITIGATE A flaw was found in fig2dev
- CVE-2025-46398 MEDIUM 5.5 DOWNGRADE MITIGATE In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input mani
- CVE-2025-46397 HIGH 7.8 DOWNGRADE MITIGATE A flaw was found in xfig
- CVE-2025-31164 MEDIUM 6.6 DOWNGRADE heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulat
- CVE-2025-31163 MEDIUM 6.6 DOWNGRADE Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulatio
- CVE-2025-31162 MEDIUM 6.6 DOWNGRADE Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manip
FAQ
How do I fix fig2dev project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fig2dev project being exploited right now?
None of the tracked fig2dev project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fig2dev project CVE should I patch first?
CVE-2025-46397 currently ranks highest (43/100): A flaw was found in xfig.