CVE Catalog

CVE-2025-31177

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service, compromising system confidentiality and availability.

Recommendation

It is recommended to immediately update Gnuplot to the latest version that includes a fix for CVE-2025-31177.

Original NVD description (English source)

gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS