libgsf vulnerabilities

CVEs whose affected-version data names the libgsf package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116124Medium· 6.3

today

GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based bu…

▾ SunlitGNOME · libgsfvia CVEORG