CVE-2021-3561

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

• CWE-119
• CWE-787

• https://bugzilla.redhat.com/show_bug.cgi?id=1955675Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00002.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C44WSY5KAQXC3Y2NMSVXXZS3M5U5U2E6/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKMOIQX6GULVSYXLYW5JQY6KJNTWV3E4/Mailing List, Third Party Advisory
• https://sourceforge.net/p/mcj/fig2dev/ci/6827c09d2d6491cb2ae3ac7196439ff3aa791fd9/Patch, Third Party Advisory
• https://sourceforge.net/p/mcj/tickets/116/Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1955675Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00002.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C44WSY5KAQXC3Y2NMSVXXZS3M5U5U2E6/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKMOIQX6GULVSYXLYW5JQY6KJNTWV3E4/Mailing List, Third Party Advisory
• https://sourceforge.net/p/mcj/fig2dev/ci/6827c09d2d6491cb2ae3ac7196439ff3aa791fd9/Patch, Third Party Advisory
• https://sourceforge.net/p/mcj/tickets/116/Exploit, Third Party Advisory

Published

May 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35603Vulnerability in the Java SE, Oracle GraalVM Enterprise Edit…3.7
• CVE-2021-35604Vulnerability in the MySQL Server product of Oracle MySQL (c…5.5
• CVE-2021-35606Vulnerability in the PeopleSoft Enterprise CS Campus Communi…5.7
• CVE-2021-35607Vulnerability in the MySQL Server product of Oracle MySQL (c…6.5
• CVE-2021-35608Vulnerability in the MySQL Server product of Oracle MySQL (c…5.3
• CVE-2021-35609Vulnerability in the PeopleSoft Enterprise PeopleTools produ…6.5
• CVE-2021-35610Vulnerability in the MySQL Server product of Oracle MySQL (c…7.1
• CVE-2021-35611Vulnerability in the Oracle Sales Offline product of Oracle …4.3
• CVE-2021-35612Vulnerability in the MySQL Server product of Oracle MySQL (c…5.5
• CVE-2021-35613Vulnerability in the MySQL Cluster product of Oracle MySQL (…3.7
• CVE-2021-35616Vulnerability in the Oracle Transportation Management produc…5.4
• CVE-2021-35617Vulnerability in the Oracle WebLogic Server product of Oracl…9.8