CVE-2025-31344 — Heap-based Buffer Overflow in Giflib

CWE-122 — Heap-based Buffer Overflow7 documents6 sources
Severity
7.3HIGHNVD
EPSS
0.1%
top 69.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Giflib Project GiflibOpeneuler GiflibDebian Giflib+6 more
Timeline
PublishedApr 14

Description

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HExploitability: 2.5 | Impact: 4.7

Affected Packages9 packages

▶CVEListV5openeuler/giflib5.2.2
▶Alpinegiflib_project/giflib< 5.2.2-r1+2
▶debiandebian/giflib

🔴Vulnerability Details

3
GHSA
GHSA-4764-r75x-h867: Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux↗2025-04-14
▶
OSV
CVE-2025-31344: Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux↗2025-04-14
▶
OSV
CVE-2025-31344: Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux↗2025-04-14
▶

📋Vendor Advisories

3
Red Hat
giflib: The giflib open-source component has a buffer overflow vulnerability↗2025-04-14
▶
Microsoft
The giflib open-source component has a buffer overflow vulnerability↗2025-04-08
▶
Debian
CVE-2025-31344: giflib - Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vuln...↗2025
▶