CVE-2025-2720

Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53

Description A vulnerability was found in the function gsf base64 encode simple. The manipulation of the argument size leads to the use of an uninitialized variable. The attack needs to be approached locally.

Recommendations For versions up to 1.14.53, as a temporary workaround, consider restricting the use of the gsf base64 encode simple function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.