CVE-2025-31344: The giflib open-source component has a buffer overflow vulnerability
Published Apr 7, 2025
·Updated
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.
This issue affects giflib: through 5.2.2.
Other sources
The giflib open-source component has a buffer overflow vulnerability
— Microsoft
Affected Software
5 affected componentsFixes available
giflib giflib<=5.2.2
Microsoft azl3 giflib 5.2.1-9
Microsoft cbl2 giflib 5.2.1-9
Microsoft cbl2 giflib 5.2.1-10
Microsoft azl3 giflib 5.2.1-10
Event History
Apr 14, 2025
CVE Published
via MITRE·07:49 AM
Data Sourced
via MITRE·07:49 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Apr 22, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-31344?
CVE-2025-31344 has a high severity rating due to the possibility of a heap-based buffer overflow.
2
How do I fix CVE-2025-31344?
To fix CVE-2025-31344, upgrade giflib to version 5.2.2 or later.
3
Which software is affected by CVE-2025-31344?
CVE-2025-31344 affects giflib versions up to and including 5.2.2.
4
What type of vulnerability is CVE-2025-31344?
CVE-2025-31344 is classified as a heap-based buffer overflow vulnerability.
5
What is the impact of exploiting CVE-2025-31344?
Exploiting CVE-2025-31344 may lead to arbitrary code execution on affected systems.