CVE-2026-116124
GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.
| CWE | CWE-122 CWE-119 |
| Vendor | gnome |
| Product | libgsf |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for gnome libgsf
Be the first to know when new medium vulnerabilities affecting gnome libgsf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
GNOME / libgsf
1.14.0 1.14.1 1.14.2 1.14.3 1.14.4 1.14.5 1.14.6 1.14.7 1.14.8 1.14.9 1.14.10 1.14.11 1.14.12 1.14.13 1.14.14 1.14.15 1.14.16 1.14.17 1.14.18 1.14.19 1.14.20 1.14.21 1.14.22 1.14.23 1.14.24 1.14.25 1.14.26 1.14.27 1.14.28 1.14.29 1.14.30 1.14.31 1.14.32 1.14.33 1.14.34 1.14.35 1.14.36 1.14.37 1.14.38 1.14.39 1.14.40 1.14.41 1.14.42 1.14.43 1.14.44 1.14.45 1.14.46 1.14.47 1.14.48 1.14.49 1.14.50 1.14.51 1.14.52 1.14.53 1.14.54 1.14.55 1.14.56 1.14.57 1.14.58 1.14.59 1.14.60
References
vuldb.com: https://vuldb.com/vuln/426192 vuldb.com: https://vuldb.com/vuln/426192/cti vuldb.com: https://vuldb.com/cve/CVE-2026-116124 vuldb.com: https://vuldb.com/submit/1004965 gitlab.gnome.org: https://gitlab.gnome.org/GNOME/libgsf/-/commit/a8e25560b74f84c3f86df6ca0ac59195fa5af68a gnome.org: https://www.gnome.org/
Credits
🔍 suyuanwang (VulDB User)