CVE-2025-31179

MediumCVSS 6.2

Published: 27/03/2025(UTC)Updated: 26/06/2026(UTC)Translated: 27/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

Risk Assessment

An attacker could exploit this vulnerability to cause a denial of service (DoS) by intentionally triggering a segmentation fault, resulting in application disruption.

Recommendation

Update gnuplot to the latest version containing a fix for this vulnerability. If an update is not possible, restrict access to the application to trusted users only.

Original NVD description (English source)

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.