graphviz/graphviz

graphviz/graphviz

on GitLab

https://gitlab.com/graphviz/graphviz

51 releases

new releases every 2 months 2 weeks

last release was last Sunday at 3:22 PM

last checked yesterday at 3:08 PM

1243

Graph Visualization Tools

Log in to subscribe

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2023-46045	February 2, 2024	7.8 HIGH	N/A
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
CVE-2020-18032	April 29, 2021	7.8 HIGH	6.8 MEDIUM
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
CVE-2019-11023	April 8, 2019	8.8 HIGH	6.8 MEDIUM
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
CVE-2019-9904	March 21, 2019	6.5 MEDIUM	4.3 MEDIUM
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.
CVE-2018-10196	May 30, 2018	5.5 MEDIUM	4.3 MEDIUM
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.