CVE-2025-2721

Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53

Description A critical issue was found in the function gsf base64 encode simple, where the manipulation of the argument size t leads to a heap-based buffer overflow. This issue can be exploited locally. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For GNOME libgsf versions up to 1.14.53, as a temporary workaround, consider restricting the use of the gsf base64 encode simple function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.