Vulnerability Description
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.
CVSS Score
7.3
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Related Weaknesses (CWE)
References
- https://gitee.com/src-openeuler/giflib/pulls/54
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA
- http://www.openwall.com/lists/oss-security/2025/04/07/3
- http://www.openwall.com/lists/oss-security/2025/04/07/4
- http://www.openwall.com/lists/oss-security/2025/04/07/5
- http://www.openwall.com/lists/oss-security/2025/04/07/6
- http://www.openwall.com/lists/oss-security/2025/04/08/1
- http://www.openwall.com/lists/oss-security/2025/04/09/5
- http://www.openwall.com/lists/oss-security/2025/04/09/7
- http://www.openwall.com/lists/oss-security/2025/04/10/1
FAQ
What is CVE-2025-31344?
CVE-2025-31344 is a vulnerability with a CVSS score of 7.3 (HIGH). Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2.
How severe is CVE-2025-31344?
CVE-2025-31344 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-31344?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.