CVE-2025-31180

CVE-2025-31180 is a gnuplot vulnerability where the CANVAS_text() function may trigger a segmentation fault, leading to a system crash. The connected documents confirm multiple advisories (e.g., USN-? - USN-7773-1, SUSE-SU-2025:01811-2, OSV entries) referencing this CVE and indicate a security up...

CVE-2025-31176

CVE-2025-31176 affects gnuplot, specifically the plot3d_points() function, which may trigger a segmentation fault and crash the system. Documents describe a local attack surface with low attack complexity, no privileges required, and no user interaction (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/...

CVE-2025-31181

CVE-2025-31181 affects gnuplot, specifically the X11_graphics() function. The issue stems from memory handling that can trigger a segmentation fault, leading to a system crash. Public references in ENISA OSV/U* advisories and Ubuntu SUSE/USN entries confirm multiple distributions have issued secu...

CVE-2025-31178

CVE-2025-31178 affects gnuplot through an unvalidated GetAnnotateString input path that may trigger a segmentation fault, causing a system crash (local, no privileges required per CVSS). Public advisories (Ubuntu/SUSE) inventory gnuplot updates as fixes for this and related CVEs; remediation is v...

CVE-2025-31179

CVE-2025-31179 affects gnuplot: xstrftime() may cause a segmentation fault and a system crash. Multiple advisories (e.g., USN-7773-1, SUSE-SU-2025:01811-2, OSV/OESA records) document the fix as part of vendor security updates. Impact is described as a local, denial-of-service risk with high avail...