CVE-2014-1235: Graphviz

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978.

Affected products

• Graphviz Graphviz: version 2.34.0 only

Published 2017-08-07. Last modified 2026-06-17.