{"id":"CVE-2025-31178","aliases":["AZL-110391","DEBIAN-CVE-2025-31178","EUVD-2025-8438","GHSA-xqc2-xvq9-7x34","JLSEC-2026-356","SUSE-SU-2025:01805-1","SUSE-SU-2025:01811-1","SUSE-SU-2025:01811-2","UBUNTU-CVE-2025-31178","USN-7773-1","openSUSE-SU-2025:15134-1"],"status":"published","title":"Gnuplot: gnuplot segmentation fault on getannotatestring","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00199,"percentile":0.09809,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-03-27T15:06:38Z","modified":"2026-11-05T15:17:13Z","fixes":[{"ecosystem":"Julia","package":"Gnuplot_jll","fixed_in":["6.0.3000+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","fixed_in":["4.6.4-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","fixed_in":["4.6.6-3ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","fixed_in":["5.2.2+dfsg1-2ubuntu1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","fixed_in":["5.2.8+dfsg1-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","fixed_in":["5.4.2+dfsg2-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","fixed_in":["6.0.0+dfsg1-1ubuntu3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gnuplot","fixed_in":["6.0.2+dfsg1-2ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gnuplot","fixed_in":["6.0.2+dfsg1-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.4.8-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.4+dfsg1-2","6.0.0+dfsg1-1","6.0.0+dfsg1-2","6.0.0+dfsg1-3","6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:13","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:14","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Julia","package":"Gnuplot_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.0.3000+0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-3.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm2"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2","4.6.4-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm2"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1","4.6.6-3ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm2"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1","5.2.2+dfsg1-2ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm2"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2","5.2.8+dfsg1-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2+dfsg2-2ubuntu0.1~esm1"}]}],"versions":["5.4.1+dfsg1-1","5.4.2+dfsg2-1","5.4.2+dfsg2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1ubuntu3+esm1"}]}],"versions":["5.4.4+dfsg1-2build1","6.0.0+dfsg1-1ubuntu2","6.0.0+dfsg1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+dfsg1-2ubuntu1"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+dfsg1-2ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm2"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2","4.6.4-2ubuntu0.1~esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm2"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1","4.6.6-3ubuntu0.1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm2"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1","5.2.2+dfsg1-2ubuntu1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm2"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2","5.2.8+dfsg1-2ubuntu0.1~esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2+dfsg2-2ubuntu0.1~esm1"}]}],"versions":["5.4.1+dfsg1-1","5.4.2+dfsg2-1","5.4.2+dfsg2-2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1ubuntu3+esm1"}]}],"versions":["5.4.4+dfsg1-2build1","6.0.0+dfsg1-1ubuntu2","6.0.0+dfsg1-1ubuntu3"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-3.1"}]}],"bundled":7}],"products":[{"vendor":"gnuplot","product":"gnuplot"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-31178","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355341","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","report","web"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2754/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31178","tags":["web"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2754"},{"url":"https://github.com/advisories/GHSA-xqc2-xvq9-7x34"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-31178","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501805-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240327","tags":["report"]},{"url":"https://bugzilla.suse.com/1240328","tags":["report"]},{"url":"https://bugzilla.suse.com/1240330","tags":["report"]},{"url":"https://bugzilla.suse.com/1241684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3359","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501811-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240325","tags":["report"]},{"url":"https://bugzilla.suse.com/1240326","tags":["report"]},{"url":"https://bugzilla.suse.com/1240329","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31180","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501811-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-31178","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31178","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7773-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-3359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31181","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4W7OHEOIGLIMCJQ3KKSEIFLCYP4GCXR7/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-31178","title":"Gnuplot: gnuplot segmentation fault on getannotatestring","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:06:38.451Z","modified":"2026-11-05T14:29:55.815Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-8438","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:06:38Z","modified":"2026-11-05T14:29:55Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:59:57.067043Z"}],"ghsa":[{"id":"GHSA-xqc2-xvq9-7x34","title":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault...","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:31:14Z","modified":"2026-06-26T00:31:59Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:08:59.978633Z"}],"nvd":[{"id":"CVE-2025-31178","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:16:03.23Z","modified":"2026-11-05T15:17:13.107Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"AZL-110391","title":"CVE-2025-31178 affecting package gnuplot 5.4.8-1","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:16:03Z","modified":"2026-10-27T05:36:16Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:02.368326Z"},{"id":"CVE-2025-31178","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:16:03.23Z","modified":"2026-04-10T05:24:56.470858Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-31178","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:16:03.23Z","modified":"2026-09-01T20:05:45.850246896Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2026-356","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2026-04-29T19:13:38.526Z","modified":"2026-07-18T00:00:42.927195771Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"UBUNTU-CVE-2025-31178","description":"A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.","status":"published","published":"2025-03-27T15:16:00Z","modified":"2026-05-20T16:21:21.607168038Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"openSUSE-SU-2025:15134-1","title":"gnuplot-6.0.2-3.1 on GA media","description":"These are all security issues fixed in the gnuplot-6.0.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-20T00:00:00Z","modified":"2026-02-05T01:20:45.109317Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01805-1","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-06-03T11:57:53Z","modified":"2026-03-23T04:46:23.57853Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01811-1","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).\n- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-06-04T09:29:55Z","modified":"2026-03-23T04:46:23.485041Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01811-2","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).\n- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-07-16T14:49:36Z","modified":"2026-03-23T04:47:38.433901Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-7773-1","title":"gnuplot vulnerabilities","description":"ChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179,\nCVE-2025-31181)\n\nChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176,\nCVE-2025-31180)\n\nChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to execute\narbitrary code or cause a denial of service. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,\nUbuntu 25.04. (CVE-2025-31177)","status":"published","published":"2025-09-25T00:56:42Z","modified":"2026-06-25T13:32:31.373981837Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}