debian/libgsf vulnerabilities

Latest debian/libgsf CVEs

Newest publication first

1. CVE-2026-116124 GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

   Published 2026-10-26

   Medium·CVSS 5.3 EPSS 0.43%

   A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated...

2. DLA-3911-1 libgsf - security update

   Published 2024-10-07

   Unknown

3. DSA-5786-1 libgsf - security update

   Published 2024-10-05

   Unknown

4. CVE-2024-42415 An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in....

   Published 2024-10-03

   High·CVSS 7.8 EPSS 0.46%

   An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing...

5. CVE-2024-36474 An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can resul...

   Published 2024-10-03

   High·CVSS 7.8 EPSS 0.40%

   An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows...

6. DLA-2183-1 libgsf - security update

   Published 2020-04-25

   Unknown

7. DLA-740-1 libgsf - security update

   Published 2016-12-11

   Unknown

8. CVE-2016-9888 An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause...

   Published 2016-12-08

   Medium·CVSS 5.5 EPSS 1.3%

   An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.

9. CVE-2006-4514 Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbit...

   Published 2006-11-30

   High·CVSS 7.5 EPSS 4.4%

   Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole...

10. DSA-1221-1 libgsf

    Published 2006-11-30

    Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.