CVE-2020-21529

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 16, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-21534.3Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resultCVE-2020-215305.5fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.CVE-2020-215315.5fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.CVE-2020-215325.5fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.CVE-2020-215335.5fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.CVE-2020-215345.5fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.CVE-2020-215355.5fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.CVE-2020-21545.5Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the JeCVE-2020-215478.8Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.CVE-2020-215488.8Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.CVE-2020-21555.3Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuratiCVE-2020-215548.1A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user