PT-2025-13562 · Fig2Dev+4 · Fig2Dev+4

Published 2025-03-28 · Updated 2025-10-21 · CVE-2025-31162

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a

Description The issue is related to a floating point exception in the fig2dev component, specifically in the get slope function. This exception can be triggered by an attacker through local input manipulation, potentially leading to availability issues due to a divide by zero error.

Recommendations For fig2dev version 3.2.9a, consider restricting the use of the get slope function until a patch is available to prevent potential exploitation.

Exploit

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2025-31162

DLA-4134-1

MGASA-2025-0152

OESA-2025-1366

OESA-2025-1367

OESA-2025-1368

OESA-2025-1406

OESA-2025-1407

OPENSUSE-SU-2025:15064-1

SUSE-SU-2025:01835-1

SUSE-SU-2025:01835-2

SUSE-SU-2025:1540-1

SUSE-SU-2025_1540-1

USN-7587-1

Affected Products

Debian

Linuxmint

Suse

Ubuntu

Fig2Dev

References · 64

• 🔥 https://sourceforge.net/p/mcj/tickets/185 · Exploit
• https://ubuntu.com/security/CVE-2020-21682 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-31162 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-31162 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-31162 · Security Note
• https://ubuntu.com/security/notices/USN-7587-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1368 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-31164 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01835-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1407 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1367 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-31163 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1406 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-31162 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1366 · Vendor Advisory