CVE-2025-2723 in GNOME libgsf
Summary
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.
Disclosure
03/25/2025
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 300743 | GNOME libgsf gsf_property_settings_collec heap-based overflow [False-Positive] | 122 | Not defined | Not defined |