Threats affecting pkg:deb/gnome/libgsf

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-116124GNOME libgsf · Heap-based Buffer Overflow Medium5.3EPSS 0.4%2026-10-26CVE Database V5CVE-2026-116124 CVE-2026-116124 is a heap-based buffer overflow vulnerability in GNOME libgsf versions 1.14.0 through 1.14.19. The flaw exists in the ole_info_read_metabat function within the OLE2 Parser component, allowing remote attackers to trigger the overflow. This vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3. A patch identified by commit a8e25560b74f84c3f86df6ca0ac59195fa5af68a is available to address the issue. EPSS 0.4%Vulnerability	CVE Database V5	2026-10-26

Page 1 of 1