https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 01:15:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08625 bdu:2024-08625 https://cve.radiocsirt.org/vuln/bdu:2024-08625 https://cve.radiocsirt.org/vuln/euvd-2026-258659 EUVD-2026-258659 https://cve.radiocsirt.org/vuln/euvd-2026-258659 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42415 <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p> <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-42415 https://cve.radiocsirt.org/vuln/ghsa-5pmr-hjgq-832v <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p> <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-5pmr-hjgq-832v https://cve.radiocsirt.org/vuln/oesa-2024-2221 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: libgsf, openEuler:20.03-LTS-SP4: libgsf, openEuler:22.03-LTS-SP1: libgsf, openEuler:24.03-LTS: libgsf, openEuler:22.03-LTS-SP4: libgsf</p> <p>The libgsf library is an extensible I/O abstraction library for dealing with structured file formats. Security Fix(es): An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2024-36474) An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2024-42415)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: libgsf, openEuler:20.03-LTS-SP4: libgsf, openEuler:22.03-LTS-SP1: libgsf, openEuler:24.03-LTS: libgsf, openEuler:22.03-LTS-SP4: libgsf</p> <p>The libgsf library is an extensible I/O abstraction library for dealing with structured file formats. Security Fix(es): An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2024-36474) An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2024-42415)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2221 https://cve.radiocsirt.org/vuln/suse-su-2024:3770-1 <p>Security update for libgsf</p> <p>Security update for libgsf</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3770-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42415 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgsf, Ubuntu:16.04:LTS: libgsf, Ubuntu:18.04:LTS: libgsf, Ubuntu:20.04:LTS: libgsf, Ubuntu:22.04:LTS: libgsf, Ubuntu:24.04:LTS: libgsf</p> <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgsf, Ubuntu:16.04:LTS: libgsf, Ubuntu:18.04:LTS: libgsf, Ubuntu:20.04:LTS: libgsf, Ubuntu:22.04:LTS: libgsf, Ubuntu:24.04:LTS: libgsf</p> <p>An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42415 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3094 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in GNOME ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in GNOME ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3094