Bug 2565117 - CVE-2026-116124 libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser [fedora-all]
Summary: CVE-2026-116124 libgsf: libgsf: Arbitrary code execution via heap-based buffe...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: libgsf
Version: rawhide
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
Assignee: Gwyn Ciesla
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: {"flaws": ["e342366d-6ea5-41f6-b9b2-e...
Depends On:
Blocks: CVE-2026-116124
TreeView+ depends on / blocked
 
Reported: 2026-11-02 11:10 UTC by Vladimir Vasilev
Modified: 2026-11-02 11:10 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Vladimir Vasilev 2026-11-02 11:10:24 UTC 
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.
Note You need to log in before you can comment on or make changes to this bug.