CVE-2026-116124

GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

State: Published
Severity: 5.3 Medium
Published: Oct 26, 2026
Updated: Oct 29, 2026
Reserved: Oct 25, 2026

Description

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X	VulDB
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C	VulDB
3.0	6.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C	VulDB
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C	VulDB

Weaknesses

CWE-122 Heap-based Buffer Overflow
CWE-119 Memory Corruption

Affected Products

Product	Versions
libgsfGNOME	1.14.0Affected 1.14.1Affected 1.14.2Affected 1.14.3Affected 1.14.4Affected 1.14.5Affected 1.14.6Affected 1.14.7Affected 1.14.8Affected 1.14.9Affected 1.14.10Affected 1.14.11Affected 1.14.12Affected 1.14.13Affected 1.14.14Affected 1.14.15Affected 1.14.16Affected 1.14.17Affected 1.14.18Affected 1.14.19Affected 1.14.20Affected 1.14.21Affected 1.14.22Affected 1.14.23Affected 1.14.24Affected and 36 more versions

Product

Versions

libgsfGNOME

1.14.0Affected
1.14.1Affected
1.14.2Affected
1.14.3Affected
1.14.4Affected
1.14.5Affected
1.14.6Affected
1.14.7Affected
1.14.8Affected
1.14.9Affected
1.14.10Affected
1.14.11Affected
1.14.12Affected
1.14.13Affected
1.14.14Affected
1.14.15Affected
1.14.16Affected
1.14.17Affected
1.14.18Affected
1.14.19Affected
1.14.20Affected
1.14.21Affected
1.14.22Affected
1.14.23Affected
1.14.24Affected
and 36 more versions

References

VDB-426192 | GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflowvdb-entrytechnical-description
VDB-426192 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
CVE-2026-116124 | CVE Analysis and Reportthird-party-advisory
Submit #1004965 | GNOME libgsf e3958edf77af1374118c278eb772e51c6fdbe235 Heap-based Buffer Overflowthird-party-advisory
https://gitlab.gnome.org/GNOME/libgsf/-/commit/a8e25560b74f84c3f86df6ca0ac59195fa5af68abroken-linkpatch
https://www.gnome.org/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.