CVE-2014-9157Not ratedEPSS 5.57%Fix availableCVE-2014-9157Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.graphvizOperating systemsUpdate to 2.36.0-0ubuntu3.1Published December 3, 2014Updated August 6, 2024Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗