CVE-2021-3561
HIGH 7.1EPSS 1.2%
An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.
- Affected
- fig2dev
- CVSS v3.1 NVD
- 7.1 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - CVSS v2.0 NVD
- 5.8 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P - EPSS
- 1.18% chance of exploitation in the next 30 days, 67th percentile
- Published
- 2021-05-26
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
Security advisories
- https://bugzilla.redhat.com/show_bug.cgi?id=1955675
- https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
- https://sourceforge.net/p/mcj/fig2dev/ci/6827c09d2d6491cb2ae3ac7196439ff3aa791fd9
- https://sourceforge.net/p/mcj/tickets/116