Threats tagged 'ghsa-vv86-jpff-556f'

A stack-based buffer overflow vulnerability exists in fig2dev version 3.2.9a of the xfig diagramming tool. The flaw occurs in the read_objects function and allows local attackers to cause memory corruption, potentially leading to code execution. The vulnerability requires local access and low privileges but no user interaction. The CVSS 3.1 base score is 7.1, indicating high severity. Red Hat has acknowledged the issue and is investigating affected products and potential fixes.