Debian/fig2dev: medium 5.5
make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.
Action: Upgrade fig2dev to 1:3.2.7b-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:3.2.7b-3 | - |
Fixed versions
| 1:3.2.7b-3 |
Sources
- osv: DEBIAN-CVE-2019-19746#Debian:14/fig2dev
- https://security-tracker.debian.org/tracker/CVE-2019-19746
published · modified · JSON