CVE-2020-18032: Debian Linux

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 33 only; version 34 only
• Graphviz Graphviz: before 2.46.0 (fixed in 2.46.0)

Published 2021-04-29. Last modified 2026-06-17.