Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-116124

GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

Description

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GNOME libgsf

  • 1.14.0affected
  • 1.14.1affected
  • 1.14.2affected
  • 1.14.3affected
  • 1.14.4affected
  • 1.14.5affected
  • 1.14.6affected
  • 1.14.7affected
  • 1.14.8affected
  • 1.14.9affected
  • 1.14.10affected
  • 1.14.11affected
  • 1.14.12affected
  • 1.14.13affected
  • 1.14.14affected
  • 1.14.15affected
  • 1.14.16affected
  • 1.14.17affected
  • 1.14.18affected
  • 1.14.19affected
  • 1.14.20affected
  • 1.14.21affected
  • 1.14.22affected
  • 1.14.23affected
  • 1.14.24affected
  • 1.14.25affected
  • 1.14.26affected
  • 1.14.27affected
  • 1.14.28affected
  • 1.14.29affected
  • 1.14.30affected
  • 1.14.31affected
  • 1.14.32affected
  • 1.14.33affected
  • 1.14.34affected
  • 1.14.35affected
  • 1.14.36affected
  • 1.14.37affected
  • 1.14.38affected
  • 1.14.39affected
  • 1.14.40affected
  • 1.14.41affected
  • 1.14.42affected
  • 1.14.43affected
  • 1.14.44affected
  • 1.14.45affected
  • 1.14.46affected
  • 1.14.47affected
  • 1.14.48affected
  • 1.14.49affected
  • 1.14.50affected
  • 1.14.51affected
  • 1.14.52affected
  • 1.14.53affected
  • 1.14.54affected
  • 1.14.55affected
  • 1.14.56affected
  • 1.14.57affected
  • 1.14.58affected
  • 1.14.59affected
  • 1.14.60affected

References