← All advisories

Critical severity9.8NVD Advisory· Published Sep 16, 2020· Updated Jun 17, 2026

CVE-2020-25412

CVE-2020-25412

Description

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Gnuplot/Gnuplot2 versions
cpe:2.3:a:gnuplot:gnuplot:5.4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnuplot:gnuplot:5.4.0:*:*:*:*:*:*:*
- (no CPE)range: <5.4
gnuplot/gnuplotdescription
osv-coords
pkg:rpm/opensuse/gnuplot&distro=openSUSE%20Tumbleweed
Range: < 5.4.2-1.3

Patches

Vulnerability mechanics

References

1

sourceforge.net/p/gnuplot/bugs/2303/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.