xschem vulnerabilities

1 known vulnerability in xschem from Stefan Schippers. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  xschem: Out-of-bounds Write

  CVE-2026-128990Nov 13, 2026Stefan Schippers

  xschem 2.9.9 through 3.4.7 contains a heap out-of-bounds write vulnerability in read_dataset() in src/rawtovcd.c due to an unchecked variable index. Attackers can supply a crafted ngspice .raw file that, when converted with rawtovcd, writes file-controlled hea