<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-16T01:15:56.774184+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2024-08625</id>
    <title>bdu:2024-08625</title>
    <updated>2026-10-16T01:15:56.782485+00:00</updated>
    <content>bdu:2024-08625</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2024-08625"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-258659</id>
    <title>EUVD-2026-258659</title>
    <updated>2026-10-16T01:15:56.782521+00:00</updated>
    <content>EUVD-2026-258659</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-258659"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2024-42415</id>
    <title>fkie_cve-2024-42415</title>
    <updated>2026-10-16T01:15:56.782535+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2024-42415"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-5pmr-hjgq-832v</id>
    <title>GHSA-5pmr-hjgq-832v</title>
    <updated>2026-10-16T01:15:56.782566+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-5pmr-hjgq-832v"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2024-2221</id>
    <title>OESA-2024-2221 — libgsf security update</title>
    <updated>2026-10-16T01:15:56.782583+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: libgsf, openEuler:20.03-LTS-SP4: libgsf, openEuler:22.03-LTS-SP1: libgsf, openEuler:24.03-LTS: libgsf, openEuler:22.03-LTS-SP4: libgsf</p>
<p>The libgsf library is an extensible I/O abstraction library for dealing with structured file formats.

Security Fix(es):

An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2024-36474)

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2024-42415)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2024-2221"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2024:3770-1</id>
    <title>SUSE-SU-2024:3770-1 — Security update for libgsf</title>
    <updated>2026-10-16T01:15:56.782621+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for libgsf</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2024:3770-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42415</id>
    <title>UBUNTU-CVE-2024-42415</title>
    <updated>2026-10-16T01:15:56.782639+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgsf, Ubuntu:16.04:LTS: libgsf, Ubuntu:18.04:LTS: libgsf, Ubuntu:20.04:LTS: libgsf, Ubuntu:22.04:LTS: libgsf, Ubuntu:24.04:LTS: libgsf</p>
<p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42415"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3094</id>
    <title>WID-SEC-W-2024-3094 — GNOME: Mehrere Schwachstellen ermöglichen Codeausführung</title>
    <updated>2026-10-16T01:15:56.782665+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen in GNOME ausnutzen, um beliebigen Programmcode auszuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3094"/>
  </entry>
</feed>
