CVE-2018-19491

An issue was discovered in post.trm in Gnuplot 5.2.5

published November 23, 2018

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01769 · 77.9th percentile
Published
2018-11-23T17:00Z
EPSS history
Timeline
  • 23 NOV 17:00Z
    An issue was discovered in post.trm in Gnuplot 5.2.5
    cvelistv5