CVE-2025-31177

MediumCVSS 5.5/10Last modified Jun 26, 2026

Description

gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
May 7, 2025
Last modified
Jun 26, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-311786.2A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.CVE-2025-311796.2A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.CVE-2025-31189.8A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of theCVE-2025-311806.2A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.CVE-2025-311816.2A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.CVE-2025-311829.8This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS SonoCVE-2025-311839.8The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 1CVE-2025-311847.8This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.CVE-2025-311853.3A logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3. Photos in the Hidden Photos Album may be CVE-2025-311863.3A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy prefCVE-2025-311875.5This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7CVE-2025-311887.8A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.
CVE-2025-31177: Medium severity, CVSS 5.5 | Vulnix