AZL-111103

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111103.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-111103

Upstream

CVE-2026-116124

Published

2026-10-26T07:17:09Z

Modified

2026-10-29T05:35:47Z

Summary

CVE-2026-116124 affecting package libgsf 1.14.47-2

Details

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-116124

Affected packages

Azure Linux:3 / libgsf

Package

Name: libgsf
Purl: pkg:rpm/azure-linux/libgsf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.14.47-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111103.json"