CVE-2025-31344

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

Score

CVSS 3.1 7.3 High

Status

Deferred - securities@openeuler.org

Published

2025-04-14

Last modified

2025-04-14

Weaknesses

CWE-122

Affected products

• Giflib (Openeuler)

References

• https://gitee.com/src-openeuler/giflib/pulls/54
• https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1292
• http://www.openwall.com/lists/oss-security/2025/04/07/3
• http://www.openwall.com/lists/oss-security/2025/04/07/4
• http://www.openwall.com/lists/oss-security/2025/04/07/5
• http://www.openwall.com/lists/oss-security/2025/04/07/6
• http://www.openwall.com/lists/oss-security/2025/04/08/1
• http://www.openwall.com/lists/oss-security/2025/04/09/5
• http://www.openwall.com/lists/oss-security/2025/04/09/7
• http://www.openwall.com/lists/oss-security/2025/04/10/1