CVE-2025-2721 in GNOME libgsf
Summary
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been classified as critical. This affects the function gsf_base64_encode_simple. The manipulation of the argument size_t leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.
Disclosure
03/25/2025
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 300741 | GNOME libgsf gsf_base64_encode_simple heap-based overflow [False-Positive] | 122 | Not defined | Not defined |