本頁列出影響 xfig_project fig2dev 的已公開 CVE 漏洞（透過 NVD CPE 關聯）。每列包含嚴重程度評分、摘要與發布日期，便於識別與分析安全議題。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2021-32280 | An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8. | [email protected] | 5.5 | 0.95% | 2021-09-20 | 2026-06-16 |
| CVE-2020-21535 | fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c. | [email protected] | 5.5 | 0.86% | 2021-09-16 | 2026-06-16 |
| CVE-2020-21534 | fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c. | [email protected] | 5.5 | 0.84% | 2021-09-16 | 2026-06-16 |
| CVE-2020-21533 | fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c. | [email protected] | 5.5 | 0.84% | 2021-09-16 | 2026-06-16 |
| CVE-2020-21532 | fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c. | [email protected] | 5.5 | 1.04% | 2021-09-16 | 2026-06-16 |
| CVE-2020-21531 | fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c. | [email protected] | 5.5 | 1.02% | 2021-09-16 | 2026-06-16 |
| CVE-2020-21530 | fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c. | [email protected] | 5.5 | 0.69% | 2021-09-16 | 2026-06-16 |
| CVE-2020-21529 | fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c. | [email protected] | 5.5 | 1.05% | 2021-09-16 | 2026-06-16 |
| CVE-2019-19797 | read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. | [email protected] | 5.5 | 1.22% | 2019-12-15 | 2026-06-16 |
| CVE-2019-14275 | Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. | [email protected] | 5.5 | 1.24% | 2019-07-26 | 2026-06-16 |