Gnuplot CVE-2020-25559

HIGH

Double Free (CWE-415)

2020-09-16 cve@mitre.org

7.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Sep 16, 2020 - 13:15 nvd

HIGH 7.8

DescriptionNVD

gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.

AnalysisAI

gnuplot 5.5 is affected by double free when executing print_set_output. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-415. gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution. Affected products include: Gnuplot.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Gnuplot

View all

CVE-2020-25412 CRITICAL Act Now POC

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code ex

CVE-2018-19492 HIGH This Week POC

An issue was discovered in cairo.trm in Gnuplot 5.2.5. Rated high severity (CVSS 7.8), this vulnerability is no authenti

CVE-2018-19491 HIGH This Week POC

An issue was discovered in post.trm in Gnuplot 5.2.5. Rated high severity (CVSS 7.8), this vulnerability is no authentic

CVE-2018-19490 HIGH This Week POC

An issue was discovered in datafile.c in Gnuplot 5.2.5. Rated high severity (CVSS 7.8), this vulnerability is no authent

CVE-2021-29369 CRITICAL Act Now

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot command

CVE-2021-44917 MEDIUM This Month POC

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithm

CVE-2017-9670 HIGH This Week

An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cau

CVE-2025-31181 MEDIUM This Month

A flaw was found in gnuplot. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low att

CVE-2025-31180 MEDIUM This Month

A flaw was found in gnuplot. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low att

CVE-2025-31179 MEDIUM This Month

A flaw was found in gnuplot. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low att

CVE-2025-31178 MEDIUM This Month

A flaw was found in gnuplot. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low att

CVE-2025-31176 MEDIUM This Month

A flaw was found in gnuplot. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low att

Same weakness CWE-415 – Double Free

View all

CVE-2014-0502 HIGH POC

CVE-2023-25136 MEDIUM POC

CVE-2014-1767 HIGH POC

CVE-2016-5768 CRITICAL POC

CVE-2016-5772 CRITICAL POC

CVE-2016-3132 CRITICAL POC

CVE-2017-6074 HIGH POC

CVE-2017-9287 MEDIUM POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2020-25559 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy