CVE-2025-31344 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.3 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
openEuler	CNA	7.3 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 9%

Debian Releases

Debian Product

Codename

giflib

bullseye	postponed
trixie	no-dsa
bookworm	no-dsa
forky	vulnerable
sid	vulnerable

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://gitee.com/src-openeuler/giflib/pulls/54

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1292

http://www.openwall.com/lists/oss-security/2025/04/07/3

http://www.openwall.com/lists/oss-security/2025/04/07/4

http://www.openwall.com/lists/oss-security/2025/04/07/5

http://www.openwall.com/lists/oss-security/2025/04/07/6

http://www.openwall.com/lists/oss-security/2025/04/08/1

http://www.openwall.com/lists/oss-security/2025/04/09/5

http://www.openwall.com/lists/oss-security/2025/04/09/7

http://www.openwall.com/lists/oss-security/2025/04/10/1