CVE-2026-116124

Public on 2026-10-26
Modified on 2026-10-28
Description
A flaw was found in libgsf. A heap-based buffer overflow vulnerability exists in the OLE2 document parser within the ole_info_read_metabat function. A remote attacker could exploit this flaw by enticing a user to open a specially crafted file. Successful exploitation could lead to arbitrary code execution or cause an application crash, resulting in a Denial of Service (DoS).
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core libgsf Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H