What’s Vulnerable › Vulnerabilities

CVE-2019-14275

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-26 · updated 2026-06-17
• Weakness: CWE-787

Description

Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.

Affected products

• Debian Linux: 8.0
• openSUSE Leap: 15.1, 15.2
• Xfig Project Fig2Dev: 3.2.7-a

References

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.html
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.html
• https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html
• https://sourceforge.net/p/mcj/tickets/52/
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.html
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.html
• https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html
• https://sourceforge.net/p/mcj/tickets/52/

Get alerted when CVE-2019-14275 or the next vulnerability affects your stack