CVE-2025-31176
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
Risk Assessment
An attacker could exploit this vulnerability to cause a denial of service (DoS) by triggering a segmentation fault, resulting in application termination.
Recommendation
It is recommended to update gnuplot to the latest version where this flaw is fixed, and monitor security advisories from the vendor.
Other vulnerabilities in gnuplot
See all- CVE-2017-9670High
CVE-2017-9670 describes an uninitialized stack variable vulnerability in the load_tic_series() function in set.c in gnuplot 5.2.rc1. An attacker can cause Denial of Service (segmentation fault and memory corruption) or possibly have unspecified other impacts when a victim opens a specially crafted file.
- CVE-2025-31177Medium
Gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
- CVE-2025-31181Medium
A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31180Medium
A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31179Medium
A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
- CVE-2025-31178Medium
A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
- CVE-1999-0409Medium
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Original NVD description (English source)
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS