CVE-2014-1236: Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote at...

Security readout for executives and security teams

CVE-2014-1236 is a stack-based buffer overflow in Graphviz 2.34.0. A malformed numeric value with a long digit sequence can trigger memory corruption while Graphviz parses input. The public record does not define the exact business impact, severity score, or confirmed real-world exploitation. Exposure is most likely where Graphviz 2.34.0 or vulnerable distribution packages process untrusted graph files or user-supplied rendering requests. Internal-only build, documentation, or diagram workflows are lower exposure unless untrusted files are opened or rendered. Prioritize systems that render externally supplied diagrams or documents. The lack of a severity score and unspecified impact prevent precise ranking, but memory corruption in a file parser warrants timely remediation where untrusted input is possible. Mitigation focus: Inventory Graphviz installations and package versions across servers, desktops, and CI images.; Apply vendor or distribution security updates for Graphviz where available.; Avoid processing untrusted Graphviz input until affected systems are updated..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.