debian/gnuplot vulnerabilities

Latest debian/gnuplot CVEs

Newest publication first

1. CVE-2025-31177 Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one

   Published 2025-05-07

   Medium·CVSS 5.5 EPSS 0.21%

   gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

2. CVE-2025-3359 Gnuplot: segmentation fault via io_str_init_static_internal function

   Published 2025-04-07

   Medium·CVSS 6.2 EPSS 0.21%

   A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

3. CVE-2025-31181 Gnuplot: gnuplot segmentation fault on x11_graphics

   Published 2025-03-27

   Medium·CVSS 6.2 EPSS 0.20%

   A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

4. CVE-2025-31180 Gnuplot: gnuplot segmentation fault on canvas_text

   Published 2025-03-27

   Medium·CVSS 6.2 EPSS 0.20%

   A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

5. CVE-2025-31179 Gnuplot: gnuplot segmentation fault on xstrftime

   Published 2025-03-27

   Medium·CVSS 6.2 EPSS 0.20%

   A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

6. CVE-2025-31178 Gnuplot: gnuplot segmentation fault on getannotatestring

   Published 2025-03-27

   Medium·CVSS 6.2 EPSS 0.20%

   A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

7. CVE-2025-31176 Gnuplot: gnuplot segmentation fault on plot3d_points

   Published 2025-03-27

   Medium·CVSS 6.2 EPSS 0.20%

   A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

8. CVE-2020-25969 gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().

   Published 2023-07-05

   Critical·CVSS 9.8 EPSS 1.0%

   gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().

9. CVE-2021-44917 A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash.

   Published 2021-12-21

   Medium·CVSS 5.5 EPSS 0.75%

   A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash.

10. CVE-2020-25412 com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

    Published 2020-09-16

    Critical·CVSS 9.8 EPSS 2.6%

    com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

11. CVE-2020-25559 gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.

    Published 2020-09-16

    High·CVSS 7.8 EPSS 1.6%

    gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.

12. DLA-1597-1 gnuplot - security update

    Published 2018-11-26

    Unknown

13. CVE-2018-19492 An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused...

    Published 2018-11-23

    High·CVSS 7.8 EPSS 1.8%

    An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This...

14. CVE-2018-19491 An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a m...

    Published 2018-11-23

    High·CVSS 7.8 EPSS 1.8%

    An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue o...

15. CVE-2018-19490 An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To expl...

    Published 2018-11-23

    High·CVSS 7.8 EPSS 1.8%

    An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bo...

16. CVE-2017-9670 An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have...

    Published 2017-06-15

    High·CVSS 7.8 EPSS 0.87%

    An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.