Gnuplot (Gnuplot) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 76 known versions, newest CVE from 2025-05-07. Vendor: Gnuplot.
CVEs of Gnuplot
- CVE-2025-31177 - CVSS 5.5 (medium), 2025-05-07: gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
- CVE-2025-31181 - CVSS 6.2 (medium), 2025-03-27: A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31176 - CVSS 6.2 (medium), 2025-03-27: A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31180 - CVSS 6.2 (medium), 2025-03-27: A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
- CVE-2025-31179 - CVSS 6.2 (medium), 2025-03-27: A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
- CVE-2025-31178 - CVSS 6.2 (medium), 2025-03-27: A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
- CVE-2020-25969 - CVSS 9.8 (critical), 2023-07-05: gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().
- CVE-2021-44917 - CVSS 5.5 (medium), 2021-12-21: A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash.
- CVE-2020-25412 - CVSS 9.8 (critical), 2020-09-16: com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.
- CVE-2020-25559 - CVSS 7.8 (high), 2020-09-16: gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.
- CVE-2018-19491 - CVSS 7.8 (high), 2018-11-23: An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the…
- CVE-2018-19490 - CVSS 7.8 (high), 2018-11-23: An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data…
- CVE-2018-19492 - CVSS 7.8 (high), 2018-11-23: An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the…
- CVE-2017-9670 - CVSS 7.8 (high), 2017-06-15: An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation…
- CVE-2002-2259 - CVSS 7.2 (high), 2002-12-31: Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown…
