CVE-2025-31344 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.3 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 22%

Debian Releases

Debian Product

Codename

giflib

bookworm	unimportant
bullseye	unimportant
forky	unimportant
sid	6.1.3-1 fixed
trixie	unimportant

openSUSE / SLES Releases

openSUSE Product

Release

giflib-devel

suse enterprise desktop 15 SP6	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP3	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP4	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP5	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP6	5.2.2-150000.4.16.1 fixed
suse enterprise server 12 SP5	5.0.5-13.9.1 fixed
suse enterprise server 15 SP2	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP3	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP4	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP5	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP6	5.2.2-150000.4.16.1 fixed

giflib-progs

suse enterprise server 12 SP3	5.0.5-13.9.1 fixed
suse enterprise server 12 SP5	5.0.5-13.9.1 fixed

libgif6

suse enterprise server 12 SP3	5.0.5-13.9.1 fixed
suse enterprise server 12 SP5	5.0.5-13.9.1 fixed

libgif6-32bit

suse enterprise server 12 SP3	5.0.5-13.9.1 fixed
suse enterprise server 12 SP5	5.0.5-13.9.1 fixed

libgif7

suse enterprise desktop 15 SP6	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP3	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP4	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP5	5.2.2-150000.4.16.1 fixed
suse enterprise sap 15 SP6	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP2	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP3	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP4	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP5	5.2.2-150000.4.16.1 fixed
suse enterprise server 15 SP6	5.2.2-150000.4.16.1 fixed

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://gitee.com/src-openeuler/giflib/pulls/54

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1292

http://www.openwall.com/lists/oss-security/2025/04/07/3

http://www.openwall.com/lists/oss-security/2025/04/07/4

http://www.openwall.com/lists/oss-security/2025/04/07/5

http://www.openwall.com/lists/oss-security/2025/04/07/6

http://www.openwall.com/lists/oss-security/2025/04/08/1

http://www.openwall.com/lists/oss-security/2025/04/09/5

http://www.openwall.com/lists/oss-security/2025/04/09/7

http://www.openwall.com/lists/oss-security/2025/04/10/1