CVE-2026-116124: GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNOME libgsfto a version that resolves this vulnerability.Patch a8e25560b74f84c3f86df6ca0ac59195fa5af68a
Event History
Frequently Asked Questions
What conditions are required to exploit this issue?
An attacker needs to induce processing of a manipulated OLE2 file by the affected parser. The vulnerability is remotely initiable and requires user interaction according to the supplied vector; no privileges are required.
Which installations are affected?
GNOME libgsf versions up to and including 1.14.60 are identified as affected. The issue is in the OLE2 Parser's ole_info_read_metabat function in gsf/gsf-infile-msole.c.
What should be done to remediate the vulnerability?
Apply the patch identified as a8e25560b74f84c3f86df6ca0ac59195fa5af68a. The provided data does not identify an alternative mitigation when patching cannot be performed immediately.