Dia

This hub aggregates every CVE we track for Dia, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Dia.

• CVE-2026-77652Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index7.8Aug 26, 2026
• CVE-2026-77658Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files7.8Aug 26, 2026
• CVE-2025-15032CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank7.4Jan 16, 2026
• CVE-2025-13132Dia: Increased Spoof Risk; Missing full screen toast7.4Nov 21, 2025
• CVE-2019-19451When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If thi...5.5Nov 29, 2019
• CVE-2008-5984Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current worki...6.9Jan 28, 2009
• CVE-2007-3408Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulnerable FreeType libraries that contain CVE-2007-2754 and/or...7.5Jun 26, 2007
• CVE-2006-2453Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.7.5May 28, 2006
• CVE-2006-2480Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via...5.1May 19, 2006
• CVE-2006-1550Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly in...7.6Mar 30, 2006
• CVE-2005-2966The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file.5.1Oct 5, 2005