{"id":"CVE-2025-31177","aliases":["AZL-110388","DEBIAN-CVE-2025-31177","EUVD-2025-13933","GHSA-xjcf-jhr2-9x97","SUSE-SU-2025:01811-1","SUSE-SU-2025:01811-2","UBUNTU-CVE-2025-31177","USN-7773-1","openSUSE-SU-2025:15134-1"],"status":"published","title":"Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00207,"percentile":0.10932,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2025-05-07T20:55:21Z","modified":"2026-11-05T15:17:12Z","fixes":[{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","fixed_in":["5.2.2+dfsg1-2ubuntu1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","fixed_in":["5.2.8+dfsg1-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","fixed_in":["5.4.2+dfsg2-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","fixed_in":["6.0.0+dfsg1-1ubuntu3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gnuplot","fixed_in":["6.0.2+dfsg1-2ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gnuplot","fixed_in":["6.0.2+dfsg1-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.4.8-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.4+dfsg1-2","6.0.0+dfsg1-1","6.0.0+dfsg1-2","6.0.0+dfsg1-3","6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:13","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:14","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm2"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1","5.2.2+dfsg1-2ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm2"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2","5.2.8+dfsg1-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2+dfsg2-2ubuntu0.1~esm1"}]}],"versions":["5.4.1+dfsg1-1","5.4.2+dfsg2-1","5.4.2+dfsg2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1ubuntu3+esm1"}]}],"versions":["5.4.4+dfsg1-2build1","6.0.0+dfsg1-1ubuntu2","6.0.0+dfsg1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+dfsg1-2ubuntu1"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+dfsg1-2ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm2"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2","4.6.4-2ubuntu0.1~esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm2"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1","4.6.6-3ubuntu0.1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm2"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1","5.2.2+dfsg1-2ubuntu1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm2"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2","5.2.8+dfsg1-2ubuntu0.1~esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2+dfsg2-2ubuntu0.1~esm1"}]}],"versions":["5.4.1+dfsg1-1","5.4.2+dfsg2-1","5.4.2+dfsg2-2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1ubuntu3+esm1"}]}],"versions":["5.4.4+dfsg1-2build1","6.0.0+dfsg1-1ubuntu2","6.0.0+dfsg1-1ubuntu3"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-3.1"}]}],"bundled":7}],"products":[{"vendor":"gnuplot","product":"gnuplot"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-31177","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355342","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2756/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31177","tags":["web"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2756"},{"url":"https://github.com/advisories/GHSA-xjcf-jhr2-9x97"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-31177","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501811-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240325","tags":["report"]},{"url":"https://bugzilla.suse.com/1240326","tags":["report"]},{"url":"https://bugzilla.suse.com/1240327","tags":["report"]},{"url":"https://bugzilla.suse.com/1240328","tags":["report"]},{"url":"https://bugzilla.suse.com/1240329","tags":["report"]},{"url":"https://bugzilla.suse.com/1240330","tags":["report"]},{"url":"https://bugzilla.suse.com/1241684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3359","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501811-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-31177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31177","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7773-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-3359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31181","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4W7OHEOIGLIMCJQ3KKSEIFLCYP4GCXR7/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-31177","title":"Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T20:55:21.714Z","modified":"2026-11-05T14:29:55.934Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-13933","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T20:55:21Z","modified":"2026-11-05T14:29:55Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:59:57.845813Z"}],"ghsa":[{"id":"GHSA-xjcf-jhr2-9x97","title":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T21:31:45Z","modified":"2026-06-26T00:32:01Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:08:59.978633Z"}],"nvd":[{"id":"CVE-2025-31177","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T21:16:03.683Z","modified":"2026-11-05T15:17:12.957Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"CVE-2025-31177","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T21:16:03.683Z","modified":"2026-04-10T05:24:56.954528Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-31177","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T21:16:03.683Z","modified":"2026-09-01T20:05:45.693886986Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"UBUNTU-CVE-2025-31177","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T21:16:00Z","modified":"2026-05-20T16:21:20.530402271Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"AZL-110388","title":"CVE-2025-31177 affecting package gnuplot 5.4.8-2","description":"gnuplot is affected by a heap buffer overflow at function utf8_copy_one.","status":"published","published":"2025-05-07T21:16:03Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:18.42484Z"},{"id":"openSUSE-SU-2025:15134-1","title":"gnuplot-6.0.2-3.1 on GA media","description":"These are all security issues fixed in the gnuplot-6.0.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-20T00:00:00Z","modified":"2026-02-05T01:20:45.109317Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01811-1","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).\n- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-06-04T09:29:55Z","modified":"2026-03-23T04:46:23.485041Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01811-2","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).\n- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-07-16T14:49:36Z","modified":"2026-03-23T04:47:38.433901Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-7773-1","title":"gnuplot vulnerabilities","description":"ChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179,\nCVE-2025-31181)\n\nChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176,\nCVE-2025-31180)\n\nChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to execute\narbitrary code or cause a denial of service. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,\nUbuntu 25.04. (CVE-2025-31177)","status":"published","published":"2025-09-25T00:56:42Z","modified":"2026-06-25T13:32:31.373981837Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}