Gnuplot

15 CVEs across 1 Gnuplot products. Browse Gnuplot vulnerabilities, severities, and proof-of-concept exploits.

Gnuplot products with known CVEs

Product	CVEs
Gnuplot	15

Gnuplot CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2025-31177`	Medium	`5.5`	2025-05-07	gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
`CVE-2025-31181`	Medium	`6.2`	2025-03-27	A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
`CVE-2025-31180`	Medium	`6.2`	2025-03-27	A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
`CVE-2025-31179`	Medium	`6.2`	2025-03-27	A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
`CVE-2025-31178`	Medium	`6.2`	2025-03-27	A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
`CVE-2025-31176`	Medium	`6.2`	2025-03-27	A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
`CVE-2020-25969`	Critical	`9.8`	2023-07-05	gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().
`CVE-2021-44917`	Medium	`5.5`	2021-12-21	A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash.
`CVE-2020-25412`	Critical	`9.8`	2020-09-16	com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.
`CVE-2020-25559`	High	`7.8`	2020-09-16	gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.
`CVE-2018-19492`	High	`7.8`	2018-11-23	An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairo…
`CVE-2018-19491`	High	`7.8`	2018-11-23	An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_opt…
`CVE-2018-19490`	High	`7.8`	2018-11-23	An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data…
`CVE-2017-9670`	High	`7.8`	2017-06-15	An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation faul…
`CVE-2002-2259`			2002-12-31	Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown att…