Shanzhuli

**Name of the Vulnerable Software and Affected Versions** fig2dev version 3.2.8a **Description** A flaw was found in the `read objects()` function of fig2dev, related to an out of bounds operation in memory. This could allow an attacker to provide crafted malicious input, causing the application to crash or potentially leading to memory corruption. The highest threat from this issue is to data integrity and system availability. **Recommendations** For fig2dev version 3.2.8a, consider disabling the `read objects()` function as a temporary workaround until a patch is available. Restrict access to potentially vulnerable areas of the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.