CVE-2025-31344
What it is
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.
At a glance
- Exploitability
- Can be exploited locally on the machine without logging in. High risk of service disruption.
- Exploit odds
- 0.3% chance of exploitation in the next 30 days (EPSS).
- Fix
- No patch or advisory is linked yet. Look at mitigations or restrict exposure.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.3% · EPSS, next 30 days
- Weakness
- CWE-122
- Record status
- Deferred
Attack profile CVSS 3.1 · 7.3
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- Low
- Availability
- High
Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
References
- https://gitee.com/src-openeuler/giflib/pulls/54
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1292
- http://www.openwall.com/lists/oss-security/2025/04/07/3
- http://www.openwall.com/lists/oss-security/2025/04/07/4
- http://www.openwall.com/lists/oss-security/2025/04/07/5
- http://www.openwall.com/lists/oss-security/2025/04/07/6
- http://www.openwall.com/lists/oss-security/2025/04/08/1
- http://www.openwall.com/lists/oss-security/2025/04/09/5
- http://www.openwall.com/lists/oss-security/2025/04/09/7
- http://www.openwall.com/lists/oss-security/2025/04/10/1