CVE-2025-31178

MediumCVSS 6.2

Published: 27/03/2025(UTC)Updated: 26/06/2026(UTC)Translated: 27/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

Risk Assessment

An attacker could exploit this vulnerability to cause a denial of service (DoS) by triggering a segmentation fault, resulting in application termination.

Recommendation

It is recommended to update gnuplot to the latest version where this vulnerability is fixed, and monitor security advisories from the vendor.

Original NVD description (English source)

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.