CVE-2025-31344 The giflib open-source component has a buffer overflow vulnerability
A heap-based buffer overflow in giflib allows attackers to execute arbitrary code or cause denial of service via crafted GIF files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-31344?
CVE-2025-31344 is a high-severity memory corruption vulnerability in openEuler giflib, published on 14 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C.
This issue affects giflib: through 5.2.2.
Weakness: CWE-122
Which versions are affected by CVE-2025-31344?
Linux distribution packages (18)
giflib SUSE:Enterprise Storage 7.1 | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Server 12 SP5-LTSS | All versions | 5.0.5-13.9.1 |
giflib SUSE:Linux Enterprise Server 15 SP3-LTSS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 5.0.5-13.9.1 |
giflib SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Manager Proxy 4.3 | All versions | 5.2.2-150000.4.16.1 |
giflib SUSE:Manager Server 4.3 | All versions | 5.2.2-150000.4.16.1 |
giflib openSUSE:Leap 15.6 | All versions | 5.2.2-150000.4.16.1 |
How do I fix CVE-2025-31344?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-31344 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-31344 exists.
Sources
Also known as ALPINE-CVE-2025-31344, AZL-60246, AZL-60261, BELL-CVE-2025-31344, CLEANSTART-2026-HB55989, DEBIAN-CVE-2025-31344 and 12 more.