CVE-2021-40241

xfig 3.2.7 is vulnerable to Buffer Overflow.

• CWE-120
• CWE-120

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992395Exploit, Issue Tracking, Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00005.html
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992395Exploit, Issue Tracking, Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00005.html

Published

Oct 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40223Rittal CMC PU III Web management (version V3.11.00_2) fails …5.4
• CVE-2021-40226xpdfreader 4.03 is vulnerable to Buffer Overflow.7.5
• CVE-2021-4023A flaw was found in the io-workqueue implementation in the L…5.5
• CVE-2021-40238A Cross Site Scriptiong (XSS) vulnerability exists in the ad…6.1
• CVE-2021-40239A Buffer Overflow vulnerability exists in the latest version…9.8
• CVE-2021-4024A flaw was found in podman. The `podman machine` function (u…6.5
• CVE-2021-40247SQL injection vulnerability in Sourcecodester Budget and Exp…9.8
• CVE-2021-4026bookstack is vulnerable to Improper Access Control4.3
• CVE-2021-40260Multiple Cross Site Scripting (XSS) vulnerabilities exist in…6.1
• CVE-2021-40261Multiple Cross Site Scripting (XSS) vulnerabilities exist in…6.1
• CVE-2021-40262A stack exhaustion issue was discovered in FreeImage before …6.5
• CVE-2021-40263A heap overflow vulnerability in FreeImage 1.18.0 via the of…8.8