Approved changes feed: RSS · Atom

cpe:2.3:a:gnuplot:gnuplot:5.2.5:*:*:*:*:*:*:*

part: a version: 5.2.5 update: *

VendorGnuplot (f26a4abc-a86d-596f-a1bb-44cba275e70c)
ProductGnuplot (5f0718cb-5491-540c-b83a-509fc0f7b36a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnuplot purl2cpe 2026-06-01 10:17:57.353222
pkg:deb/ubuntu/gnuplot purl2cpe 2026-06-01 10:17:57.353224
pkg:github/gnuplot/gnuplot purl2cpe 2026-06-01 10:17:57.353225
pkg:gitlab/redhat/gnuplot purl2cpe 2026-06-01 10:17:57.353226
pkg:rpm/centos/gnuplot purl2cpe 2026-06-01 10:17:57.353228
pkg:rpm/fedora/gnuplot purl2cpe 2026-06-01 10:17:57.353229
pkg:rpm/opensuse/gnuplot purl2cpe 2026-06-01 10:17:57.353230
pkg:sourceforge/gnuplot purl2cpe 2026-06-01 10:17:57.353232

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19492 vulnerable 2026-06-08 05:11:15.797188 Details available
An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend.
Published: 2018-11-23T17:00:00.000Z
Updated: 2024-08-05T11:37:11.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19491 vulnerable 2026-06-08 05:11:15.796616 Details available
An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.
Published: 2018-11-23T17:00:00.000Z
Updated: 2024-08-05T11:37:11.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19490 vulnerable 2026-06-08 05:11:15.796035 Details available
An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.
Published: 2018-11-23T17:00:00.000Z
Updated: 2024-08-05T11:37:11.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.