CVE-2017-9670: Gnuplot

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file.

Affected products

• Gnuplot Gnuplot: version 5.2 only

Published 2017-06-15. Last modified 2026-06-17.