CVE

CVE-2023-45920

Date: (C)2024-03-27   (M)2024-04-12

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.

Reference:

http://seclists.org/fulldisclosure/2024/Jan/48

https://sourceforge.net/p/mcj/tickets/155/