Unrated severityNVD Advisory· Published Dec 3, 2014· Updated Jun 17, 2026

CVE-2014-9157

Description

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Graphviz/Graphviz2 versions
cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*range: <2.42.4
- (no CPE)
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
osv-coords17 versions
pkg:apk/chainguard/graphviz pkg:apk/chainguard/graphviz-dev pkg:apk/chainguard/graphviz-doc pkg:apk/chainguard/graphviz-graphs pkg:apk/chainguard/lua5.4-graphviz pkg:apk/chainguard/py3.10-graphviz pkg:apk/chainguard/py3.11-graphviz pkg:apk/chainguard/py3.12-graphviz pkg:apk/chainguard/py3.13-graphviz pkg:apk/chainguard/py3-graphviz pkg:apk/chainguard/py3-gv pkg:apk/wolfi/graphviz pkg:apk/wolfi/graphviz-dev pkg:apk/wolfi/graphviz-doc pkg:apk/wolfi/graphviz-graphs pkg:apk/wolfi/lua5.4-graphviz pkg:apk/wolfi/py3-gv
< 0+ 16 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

seclists.org/oss-sec/2014/q4/784nvdExploitMailing ListThird Party Advisory
seclists.org/oss-sec/2014/q4/872nvdExploitMailing ListThird Party Advisory
github.com/ellson/graphviz/commit/99eda421f7ddc27b14e4ac1d2126e5fe41719081nvdExploitThird Party Advisory
advisories.mageia.org/MGASA-2014-0520.htmlnvdThird Party Advisory
www.debian.org/security/2014/dsa-3098nvdThird Party Advisory
www.securityfocus.com/bid/71283nvdBroken LinkThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/98949nvdThird Party AdvisoryVDB Entry
secunia.com/advisories/60166nvdBroken Link
www.mandriva.com/security/advisoriesnvdBroken Link
www.mandriva.com/security/advisoriesnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000