CVE-2025-2724

A flaw was found in the libgsf package, affecting the sortingkeycopy function. It is possible to launch the attack on the local host, and manipulation of the Name argument can lead to out-of-bounds read. Mitigation Mitigation for this issue is either not available or the currently available optio...

CVE-2025-2724

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the only way to get an object of type GsfMSOleSortingKey is via...

CVE-2025-2724

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the only way to get an object of type GsfMSOleSortingKey is via...

CVE-2025-2724

...

CVE-2025-2724

CVE-2025-2724 relates to GNOME LibGSF’s sorting_key_copy function. Affected is the sorting_key_copy operation where manipulating the Name argument can cause an out-of-bounds read, potentially enabling local impact. Red Hat notes limited or no mitigations meeting security criteria. Ubuntu/Ubuntu-d...

CVE-2025-2724

...

CVE-2025-2724

Last updated 25 March 2025...