Log in Start free

Vulnerability · Published Apr 14, 2025 · Assigned by openEuler

CVE-2025-31344The giflib open-source component has a buffer overflow vulnerability

High 7.3

In plain English

A high-severity heap buffer overflow in giflib from openEuler. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 82.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.21giflib5.2.2-r1ALPINE-CVE-2025-31344
Alpine:v3.22giflib5.2.2-r1ALPINE-CVE-2025-31344
Alpine:v3.23giflib5.2.2-r1ALPINE-CVE-2025-31344
Alpine:v3.24giflib5.2.2-r1ALPINE-CVE-2025-31344
Debian:12giflibno fix listedDEBIAN-CVE-2025-31344
Debian:13giflibno fix listedDEBIAN-CVE-2025-31344
Debian:14giflib6.1.3-1DEBIAN-CVE-2025-31344
Ubuntu:22.04:LTSgiflibno fix listedUBUNTU-CVE-2025-31344
Ubuntu:24.04:LTSgiflibno fix listedUBUNTU-CVE-2025-31344
Ubuntu:25.10giflibno fix listedUBUNTU-CVE-2025-31344

Affected products (as reported)

VendorProductVersions
openEuler giflib 0 – through 5.2.2

Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

References