CVE-2020-21680

MEDIUM

fig2dev 3.2.7b - Denial of Service via Stack-Based Buffer Overflow in put_arrow()

Title source: llm

Description

A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://sourceforge.net/p/mcj/tickets/74/

Scores

CVSS v3 5.5

EPSS 0.0068

EPSS Percentile 48.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-787

Status published

Products (1)

fig2dev_project/fig2dev 3.2.7b

Published Aug 10, 2021

Tracked Since Feb 18, 2026