CVE-2025-31180
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
Risk Assessment
An attacker could exploit this vulnerability to cause a denial of service (DoS) by intentionally triggering a crash of the gnuplot program.
Recommendation
It is recommended to update gnuplot to the latest version containing a fix for CVE-2025-31180.
Other vulnerabilities in gnuplot
See all- CVE-2017-9670High
CVE-2017-9670 describes an uninitialized stack variable vulnerability in the load_tic_series() function in set.c in gnuplot 5.2.rc1. An attacker can cause Denial of Service (segmentation fault and memory corruption) or possibly have unspecified other impacts when a victim opens a specially crafted file.
- CVE-2025-31177Medium
Gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
- CVE-2025-31181Medium
A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31179Medium
A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
- CVE-2025-31178Medium
A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31176Medium
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
- CVE-1999-0409Medium
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Original NVD description (English source)
A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS