readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c.

fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c.

fig2dev 3.2.7b contains a stack buffer overflow in the readtextobject function in read.c.

fig2dev 3.2.7b contains a global buffer overflow in the getline function in read.c.

fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c.

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c.

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.