CVE-2025-2723
libgsf: GNOME libgsf gsf_property_settings_collec heap-based overflow
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2025
Updated · June 30, 2026
Description
A flaw was found in the GNOME libgsf package, affecting the gsf_property_settings_collec function. Manipulation of the n_alloced_params argument can lead to a heap-based buffer overflow.
Statement
This CVE has been marked as Rejected by the assigning CNA. The code maintainer explains that "[the] call is invalid [as] the buffer pointed to by "data" must have "len" valid bytes." The documentation was fixed to make that clear.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-805 · Buffer Access with Incorrect Length Value