transfig (SUSE:HPE Helion OpenStack 8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:HPE Helion OpenStack 8 package transfig, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (16)

• CVE-2021-3561 — CVSS 7.1 (high): An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a…
• CVE-2019-19746 — CVSS 5.5 (medium): make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large…
• CVE-2019-19797 — CVSS 5.5 (medium): read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.
• CVE-2020-21529 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
• CVE-2020-21530 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
• CVE-2020-21531 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
• CVE-2020-21532 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
• CVE-2020-21533 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
• CVE-2019-19555 — CVSS 5.5 (medium): read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
• CVE-2020-21535 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
• CVE-2020-21680 — CVSS 5.5 (medium): A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service…
• CVE-2020-21681 — CVSS 5.5 (medium): A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via…
• CVE-2020-21682 — CVSS 5.5 (medium): A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via…
• CVE-2020-21683 — CVSS 5.5 (medium): A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a…
• CVE-2021-32280 — CVSS 5.5 (medium): An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in…
• CVE-2020-21534 — CVSS 5.5 (medium): fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.