CVE-2026-116124

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 61/100
Published: 2026-10-26 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Passive
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

Weakness Classification (2)

Affected Software (61)

VendorProductVersion
GNOME libgsf 1.14.0
GNOME libgsf 1.14.1
GNOME libgsf 1.14.2
GNOME libgsf 1.14.3
GNOME libgsf 1.14.4
GNOME libgsf 1.14.5
GNOME libgsf 1.14.6
GNOME libgsf 1.14.7
GNOME libgsf 1.14.8
GNOME libgsf 1.14.9
GNOME libgsf 1.14.10
GNOME libgsf 1.14.11
GNOME libgsf 1.14.12
GNOME libgsf 1.14.13
GNOME libgsf 1.14.14
GNOME libgsf 1.14.15
GNOME libgsf 1.14.16
GNOME libgsf 1.14.17
GNOME libgsf 1.14.18
GNOME libgsf 1.14.19
GNOME libgsf 1.14.20
GNOME libgsf 1.14.21
GNOME libgsf 1.14.22
GNOME libgsf 1.14.23
GNOME libgsf 1.14.24
GNOME libgsf 1.14.25
GNOME libgsf 1.14.26
GNOME libgsf 1.14.27
GNOME libgsf 1.14.28
GNOME libgsf 1.14.29
Showing 30 of 61 entries

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.43%
Raw Score 0.004260
Percentile 36.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00426
2026-10-28
0.00426

Intelligence Sources

mitre ref →
nvd ref →