CVE Vulnerabilities

CVE-2023-45920

NULL Pointer Dereference

Published: Mar 27, 2024 | Modified: Oct 10, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

Name Vendor Start Version End Version
Xfig Xfig_project 3.2.8 (including) 3.2.8 (including)
Xfig Ubuntu mantic *

Potential Mitigations

References