The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 20, 2017 |
| Debian | — | Upgrade fig2dev | Jul 30, 2024 | Nov 20, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 20, 2017 |
| Suse | — | Upgrade transfig | Jan 27, 2018 | Nov 20, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub