A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).
The product calls free() twice on the same memory address.
Link | Tags |
---|---|
https://sourceforge.net/p/mcj/tickets/125/ | exploit third party advisory patch |