CVE-2020-21680

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.7b

Description A stack-based buffer overflow in the put arrow() component in genpict2e.c of fig2dev allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

Recommendations For fig2dev version 3.2.7b, consider disabling the put arrow() function until a patch is available to prevent exploitation of the buffer overflow vulnerability.