CVE-2025-31177: Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one
gnuplot 6.1 is affected by heap-buffer-overflow when executing function utf8copyone. This may result in local code execution.
Other sources
gnuplot is affected by a heap buffer overflow at function utf8copyone.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31177?
CVE-2025-31177 has a high severity rating due to the potential for local code execution from a heap buffer overflow.
How do I fix CVE-2025-31177?
To fix CVE-2025-31177, upgrade to the patched version of Gnuplot that addresses the heap buffer overflow vulnerability.
What are the potential impacts of CVE-2025-31177?
The potential impacts of CVE-2025-31177 include the risk of local code execution on affected systems.
Which versions of Gnuplot are affected by CVE-2025-31177?
Gnuplot 6.1 is specifically affected by CVE-2025-31177, which may lead to security issues.
Is there a workaround for CVE-2025-31177?
Currently, the best approach is to update to a secure version of Gnuplot, as there are no official workarounds for CVE-2025-31177.