https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-46400.htmlhttps://patchthecve.com/cve/CVE-2025-46400.htmlTue, 30 Jun 2026 05:17:22 +0000MEDIUM 5.5: In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.https://patchthecve.com/cve/CVE-2025-46399.htmlhttps://patchthecve.com/cve/CVE-2025-46399.htmlTue, 30 Jun 2026 05:17:22 +0000MEDIUM 5.5: A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.https://patchthecve.com/cve/CVE-2025-46398.htmlhttps://patchthecve.com/cve/CVE-2025-46398.htmlTue, 30 Jun 2026 05:17:22 +0000MEDIUM 5.5: In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.https://patchthecve.com/cve/CVE-2025-46397.htmlhttps://patchthecve.com/cve/CVE-2025-46397.htmlTue, 30 Jun 2026 05:17:22 +0000HIGH 7.8: A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.https://patchthecve.com/cve/CVE-2025-31164.htmlhttps://patchthecve.com/cve/CVE-2025-31164.htmlWed, 17 Jun 2026 09:09:56 +0000MEDIUM 6.6: heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.https://patchthecve.com/cve/CVE-2025-31163.htmlhttps://patchthecve.com/cve/CVE-2025-31163.htmlWed, 17 Jun 2026 09:09:56 +0000MEDIUM 6.6: Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.https://patchthecve.com/cve/CVE-2025-31162.htmlhttps://patchthecve.com/cve/CVE-2025-31162.htmlWed, 17 Jun 2026 09:09:56 +0000MEDIUM 6.6: Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.