{"id":"AZL-111103","summary":"CVE-2026-116124 affecting package libgsf 1.14.47-2","details":"A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.","modified":"2026-10-29T05:35:47Z","published":"2026-10-26T07:17:09Z","upstream":["CVE-2026-116124"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116124"}],"affected":[{"package":{"name":"libgsf","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/libgsf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.14.47-2"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111103.json"}}],"schema_version":"1.9.2"}