CVE-2025-2723 in GNOME libgsf
Sumário (Inglês)
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsf_property_settings_collec. The manipulation of the argument n_alloced_params leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.
Divulgação
25/03/2025
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 300743 | GNOME libgsf gsf_property_settings_collec Excesso de tampão [False-Positive] | 122 | Não definido | Não definido |