p PatchFirst

CVE-2026-116124

CVE-2026-116124 · GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

CVSS 5.3 · Medium · EPSS 0.4%

Published
Updated

Stack: system

Affected products and versions

  • libgsf

    Versions
    • 1.14.0: Affected
    • 1.14.1: Affected
    • 1.14.2: Affected
    • 1.14.3: Affected
    • 1.14.4: Affected
    • 1.14.5: Affected
    • 1.14.6: Affected
    • 1.14.7: Affected
    • 1.14.8: Affected
    • 1.14.9: Affected
    • 1.14.10: Affected
    • 1.14.11: Affected
    • 1.14.12: Affected
    • 1.14.13: Affected
    • 1.14.14: Affected
    • 1.14.15: Affected
    • 1.14.16: Affected
    • 1.14.17: Affected
    • 1.14.18: Affected
    • 1.14.19: Affected
    • 1.14.20: Affected
    • 1.14.21: Affected
    • 1.14.22: Affected
    • 1.14.23: Affected
    • 1.14.24: Affected
    • 1.14.25: Affected
    • 1.14.26: Affected
    • 1.14.27: Affected
    • 1.14.28: Affected
    • 1.14.29: Affected
    • 1.14.30: Affected
    • 1.14.31: Affected
    • 1.14.32: Affected
    • 1.14.33: Affected
    • 1.14.34: Affected
    • 1.14.35: Affected
    • 1.14.36: Affected
    • 1.14.37: Affected
    • 1.14.38: Affected
    • 1.14.39: Affected
    • 1.14.40: Affected
    • 1.14.41: Affected
    • 1.14.42: Affected
    • 1.14.43: Affected
    • 1.14.44: Affected
    • 1.14.45: Affected
    • 1.14.46: Affected
    • 1.14.47: Affected
    • 1.14.48: Affected
    • 1.14.49: Affected
    • 1.14.50: Affected
    • 1.14.51: Affected
    • 1.14.52: Affected
    • 1.14.53: Affected
    • 1.14.54: Affected
    • 1.14.55: Affected
    • 1.14.56: Affected
    • 1.14.57: Affected
    • 1.14.58: Affected
    • 1.14.59: Affected
    • 1.14.60: Affected

    No fix published

  • libgsf Debian:12

    Versions
    • 1.14.50-1
    • 1.14.50-1+deb12u1
    • 1.14.51-1
    • 1.14.51-2
    • 1.14.52-1
    • 1.14.52-1.1
    • 1.14.53-1
    • 1.14.53-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libgsf Debian:13

    Versions
    • 1.14.53-1
    • 1.14.53-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libgsf Debian:14

    Versions
    • 1.14.53-1
    • 1.14.53-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →