{"id":"CVE-2025-31344","aliases":["ALPINE-CVE-2025-31344","AZL-60246","AZL-60261","BELL-CVE-2025-31344","CLSA-2025-1747903049","DEBIAN-CVE-2025-31344","EUVD-2025-10875","GHSA-4764-r75x-h867","MGASA-2025-0135","OESA-2025-1380","OESA-2025-1381","OESA-2025-1382","OESA-2025-1383","OESA-2025-1388","OESA-2025-1389","ROOT-OS-DEBIAN-11-CVE-2025-31344","ROOT-OS-DEBIAN-12-CVE-2025-31344","SUSE-SU-2025:1163-1","SUSE-SU-2025:1164-1","UBUNTU-CVE-2025-31344"],"status":"published","title":"The giflib open-source component has a buffer overflow vulnerability","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00265,"percentile":0.18552,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2025-04-08T07:02:13Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"giflib","fixed_in":["5.2.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"giflib","fixed_in":["5.2.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"giflib","fixed_in":["5.2.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"giflib","fixed_in":["5.2.2-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"giflib","fixed_in":["5.2.1-9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"giflib","fixed_in":["5.2.1-10"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"giflib","fixed_in":["5.2.2-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"giflib","fixed_in":["5.2.2-r1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"giflib","fixed_in":["6.1.3-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"giflib","fixed_in":["5.2.1-7.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"giflib","fixed_in":["5.2.2-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"giflib","fixed_in":["5.2.2-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"giflib","fixed_in":["5.2.2-2.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"giflib","fixed_in":["5.2.2-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"giflib","fixed_in":["5.2.1-2.5+deb12u1.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-giflib","fixed_in":["5.2.1-2.5+deb12u1.aikido.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"giflib","fixed_in":["5.0.5-13.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"giflib","fixed_in":["5.0.5-13.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"giflib","fixed_in":["5.2.2-150000.4.16.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-r1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-10"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-r2"},{"fixed":"5.2.2-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-r2"},{"fixed":"5.2.2-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1-2.5","5.2.1-2.5+deb12u1","5.2.2-1","6.1.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.2-1","5.2.2-1+deb13u1","6.1.3-1"]},{"source":"osv","ecosystem":"Debian:14","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.3-1"}]}],"versions":["5.2.2-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-2.5+deb12u1.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-2.5+deb12u1.aikido.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-13.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.16.1"}]}]}],"products":[{"vendor":"giflib","product":"giflib"},{"vendor":"openeuler","product":"giflib"}],"references":[{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1292","tags":["web"]},{"url":"https://gitee.com/src-openeuler/giflib/pulls/54","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/07/3","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/07/4","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/07/5","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/07/6","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/08/1","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/09/5","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/09/7","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/10/1","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31344","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4764-r75x-h867"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-31344","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-31344","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1747903049.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-31344","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0135.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34178","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/04/07/3","tags":["web","report"]},{"url":"https://lists.suse.com/pipermail/sle-updates/2025-April/038931.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1380","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1381","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1382","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1383","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1388","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1389","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251163-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240416","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31344","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251164-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-31344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31344","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-31344","title":"The giflib open-source component has a buffer overflow vulnerability","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T07:49:36.597Z","modified":"2025-04-14T13:39:00.299Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:44.763463Z"}],"euvd":[{"id":"EUVD-2025-10875","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T07:49:36Z","modified":"2025-04-14T13:39:00Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:33.975888Z"}],"ghsa":[{"id":"GHSA-4764-r75x-h867","title":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is...","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T09:30:25Z","modified":"2025-04-14T09:30:31Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:01:31.517Z"}],"nvd":[{"id":"CVE-2025-31344","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T08:15:13.973Z","modified":"2026-06-17T09:10:16.09Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:11:00.456643Z"}],"osv":[{"id":"ALPINE-CVE-2025-31344","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T08:15:13.973Z","modified":"2026-08-27T22:18:02.878856771Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-31344","status":"published","published":"2025-04-10T06:00:04.44336Z","modified":"2026-01-26T09:39:06.820893Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"DEBIAN-CVE-2025-31344","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.  This issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T08:15:13.973Z","modified":"2026-09-01T20:05:45.786648451Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1380","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nopeneuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读(CVE-2025-31344)","status":"published","published":"2025-04-08T11:08:28Z","modified":"2026-08-18T01:17:50.992905504Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1381","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nopeneuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读(CVE-2025-31344)","status":"published","published":"2025-04-08T11:08:28Z","modified":"2026-08-18T01:17:50.338110172Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1382","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nopeneuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读(CVE-2025-31344)","status":"published","published":"2025-04-08T11:08:28Z","modified":"2026-08-18T01:17:51.008285932Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1383","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nopeneuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读(CVE-2025-31344)","status":"published","published":"2025-04-08T11:08:28Z","modified":"2026-08-18T01:17:51.403207561Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1388","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nopeneuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读(CVE-2025-31344)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:17:51.555631345Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1389","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nopeneuler社区开源软件giflib存在堆缓冲区溢出漏洞，通过未gif2rgb构造异常输入，造成内存越界读(CVE-2025-31344)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:17:51.434633216Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-31344","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.","status":"withdrawn","published":"2025-04-14T08:15:00Z","modified":"2026-04-20T08:28:43.803015Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"AZL-60246","title":"CVE-2025-31344 affecting package giflib for versions less than 5.2.1-9","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T08:15:13Z","modified":"2026-04-21T04:37:23.040461Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-60261","title":"CVE-2025-31344 affecting package giflib for versions less than 5.2.1-10","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T08:15:13Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"CLSA-2025-1747903049","title":"giflib: Fix of 2 CVEs","description":"- CVE-2023-48161: fix heap-buffer overflow\n- CVE-2025-31344: fix heap-buffer overflow","status":"published","published":"2025-05-22T08:37:34Z","modified":"2026-06-01T00:30:47.415826962Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CVE-2025-31344","description":"Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.\n\nThis issue affects giflib: through 5.2.2.","status":"published","published":"2025-04-14T08:15:13Z","modified":"2026-04-16T04:32:55.562144885Z","updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"MGASA-2025-0135","title":"Updated giflib packages fix security vulnerability","description":"The giflib open-source component has a buffer overflow vulnerability.\n(CVE-2025-31344)\n","status":"published","published":"2025-04-12T19:04:16Z","modified":"2026-05-16T06:30:59.475803Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-31344","title":"CVE-2025-31344 in giflib - Patched by Root","description":"Root has patched CVE-2025-31344 in the giflib package for Root:Debian:11. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-20T12:40:47Z","modified":"2026-10-09T13:00:07.52784164Z","updated_at":"2026-11-02T15:53:29.356832Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-31344","title":"CVE-2025-31344 in giflib - Patched by Root","description":"Root has patched CVE-2025-31344 in the giflib package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-27T12:28:51Z","modified":"2026-08-27T13:45:03.646151738Z","updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"SUSE-SU-2025:1163-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\n- CVE-2025-31344: Fixed a buffer overflow in function DumpScreen2RGB (bsc#1240416)\n","status":"published","published":"2025-04-08T07:02:13Z","modified":"2026-02-04T04:13:47.544686Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1164-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\n- CVE-2025-31344: Fixed a buffer overflow in function DumpScreen2RGB (bsc#1240416)\n","status":"published","published":"2025-04-08T07:02:58Z","modified":"2026-02-04T03:28:51.271168Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}