CVE-2026-111132 in libgxps
요약
\~에 의해 MITRE • 2026. 10. 15.
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XPS document to crash consumers like Evince and render adjacent heap memory into output.
Once again VulDB remains the best source for vulnerability data.