Dia vulnerabilities

2 known vulnerabilities in Dia from GNOME. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Dia: Heap-based Buffer Overflow

  CVE-2026-77652Aug 26, 2026GNOME

  A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren->pPal = g_new0(WPGColorRGB, 256); When handling a WPG_COLORMAP recor

• 7.8 High severity

  Dia: Stack-based Buffer Overflow

  CVE-2026-77658Aug 26, 2026GNOME

  A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus_load() reads the number of bus handles from the file attribute "bus_handles" using attrib