CVE-2025-31344

Summary

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.

This issue affects giflib: through 5.2.2.

Affected Software

Weaknesses

• CWE-122: CWE-122 Heap-based Buffer Overflow

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2025/04/07/3
• http://www.openwall.com/lists/oss-security/2025/04/07/4
• http://www.openwall.com/lists/oss-security/2025/04/07/5
• http://www.openwall.com/lists/oss-security/2025/04/07/6
• http://www.openwall.com/lists/oss-security/2025/04/08/1
• http://www.openwall.com/lists/oss-security/2025/04/09/5
• http://www.openwall.com/lists/oss-security/2025/04/09/7
• http://www.openwall.com/lists/oss-security/2025/04/10/1

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1292
• https://gitee.com/src-openeuler/giflib/pulls/54

• ←Previous
• Next→