Approved changes feed: RSS · Atom

cpe:2.3:a:xfig_project:xfig:3.2.8:*:*:*:*:*:*:*

part: a version: 3.2.8 update: *

VendorXfig Project (082f0204-7199-5a56-aa33-4694ab415f46)
ProductXfig (78f92659-3efc-5433-9442-4e6b30ffca22)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xfig purl2cpe 2026-06-01 10:12:08.447420
pkg:deb/ubuntu/xfig purl2cpe 2026-06-01 10:12:08.447422
pkg:github/delabrcd/xfig purl2cpe 2026-06-01 10:12:08.447423
pkg:rpm/fedora/xfig purl2cpe 2026-06-01 10:12:08.447424
pkg:rpm/opensuse/xfig purl2cpe 2026-06-01 10:12:08.447426
pkg:sourceforge/mcj purl2cpe 2026-06-01 10:12:08.447427

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45920 vulnerable 2026-06-08 06:12:43.627520 Details available
Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.
Published: 2024-03-27T00:00:00.000Z
Updated: 2025-11-04T18:17:59.554Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.