CVE-2021-37530

Name of the Vulnerable Software and Affected Versions fig2dev versions 3.28a and earlier

Description The issue is related to a denial of service due to a segfault in the open stream function. This can be caused by a buffer overflow in memory, potentially allowing an attacker to cause a service disruption. The open stream function in readpics.c is specifically identified as the vulnerable component.

Recommendations For fig2dev versions 3.28a and earlier, consider disabling the open stream function as a temporary workaround until a patch is available. Restrict access to the readpics.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.