CVE-2025-31163

Name of the Vulnerable Software and Affected Versions xfig fig2dev version 3.2.9a

Description The issue is related to a segmentation fault in the fig2dev component of xfig, which can be triggered by manipulating local input via the put patternarc function. This can lead to a null pointer dereference, potentially allowing an attacker to impact availability.

Recommendations For xfig fig2dev version 3.2.9a, consider restricting the use of the put patternarc function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.