CVE-2025-31177

Medium CVSS: 5.5

gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

Vendor

Product

CWE

Yayın Tarihi

2025-05-07 21:16:03

Güncelleme

2026-01-08 04:15:53

Source Identifier

secalert@redhat.com

KEV Date Added

CWE-122 Gnuplot MEDIUM Gnuplot 2025

https://access.redhat.com/security/cve/CVE-2025-31177 https://bugzilla.redhat.com/show_bug.cgi?id=2355342

Medium

CVE-2025-31176

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

Medium

CVE-2025-31178

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

Medium

CVE-2025-31179

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

Medium

CVE-2025-31180

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

Medium

CVE-2025-31181

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.