UBUNTU-CVE-2026-116124: Buffer Overflow

Published Oct 26, 2026

Updated

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

Affected Software

8 affected components

ubuntu/libgsf*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade GNOME libgsf to a version that resolves this vulnerability.
Patch a8e25560b74f84c3f86df6ca0ac59195fa5af68a

Event History

Oct 26, 2026

CVE Published

via OSV·07:17 AM

Data Sourced

via OSV·07:17 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Does an attacker need an account or elevated privileges to exploit this issue?

No privileges are required according to the CVSS vector. Exploitation is network-reachable but requires user interaction.

Which deployments should be assessed first?

Assess Ubuntu systems using libgsf, particularly where untrusted or externally supplied OLE2 documents may be processed. The affected upstream versions are listed as up to 1.14.60.

What remediation information is available?

Apply the vendor patch identified as a8e25560b74f84c3f86df6ca0ac59195fa5af68a. The provided data does not identify a separate mitigation or workaround for systems that cannot yet be patched.

UBUNTU-CVE-2026-116124: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Does an attacker need an account or elevated privileges to exploit this issue?

Which deployments should be assessed first?

What remediation information is available?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need an account or elevated privileges to exploit this issue?

Which deployments should be assessed first?

What remediation information is available?