fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
xfig project fig2dev 3.2.7
debian debian linux 9.0
debian debian linux 10.0