Multiple vulnerabilities were found in fig2dev, a utility for converting XFig figure files, which could lead to code execution or denial of service upon specially crafted input files.

Source: Debian 11 bullseye DLA-4147-1 moderate: fig2dev code execution and DoS