CVE-2020-21675

MEDIUM

fig2dev 3.2.7b - Denial of Service via Stack-Based Buffer Overflow in genptk_text

Title source: llm

Description

A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

References (3)

Core 3

Core References

Technical Description x_refsource_misc

https://cwe.mitre.org/data/definitions/121.html

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://sourceforge.net/p/mcj/tickets/78/

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html

Scores

CVSS v3 5.5

EPSS 0.0106

EPSS Percentile 60.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-787

Status published

Products (2)

debian/debian_linux 9.0

fig2dev_project/fig2dev 3.2.7b

Published Aug 10, 2021

Tracked Since Feb 18, 2026