CVE-2025-2723 in GNOME libgsf
Resumen (Inglés)
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.
Divulgación
2025-03-25
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 300743 | GNOME libgsf gsf_property_settings_collec desbordamiento de búfer [False-Positive] | 122 | No está definido | No está definido |