CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

UBUNTU-CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

EUVD-2026-2742

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

GPAC 安全漏洞

GPAC is an open source multimedia framework. GPAC suffers from an out-of-bounds read vulnerability that stems from the GSF demultiplexer filter component failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

EUVD-2025-144362

Malicious code in nabuf-otimon-gsf npm...

Malicious code in nabuf-otimon-gsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de19a70270e548b512709eb198ba4db8094fbf011771bfd350bb40914df30722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libgsf (UTSA-2025-663536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-663536 advisory. An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library libgsf version v1.14.52. A...

MAL-2025-22012 Malicious code in gsf.certificate-list (npm)

The package gsf.certificate-list was found to contain malicious code...

MAL-2025-22011 Malicious code in gsf.billing-summary (npm)

The package gsf.billing-summary was found to contain malicious code...

MAL-2025-22013 Malicious code in gsf.document-list (npm)

The package gsf.document-list was found to contain malicious code...

The vulnerability of the gsf_base64_encode_simple function in the structured file library. The GNOME Project’s libgsf allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

UBUNTU-CVE-2025-2723

A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsfpropertysettingscollec. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted earl...

UBUNTU-CVE-2025-2721

A vulnerability was found in GNOME libgsf up to 1.14.53. It has been classified as critical. This affects the function gsfbase64encodesimple. The manipulation of the argument sizet leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about th...

编号撤回

libgsf is a GNOME open source library. This CVE number has been withdrawn...

Debian dla-3911 : gir1.2-gsf-1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3911 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3911-1 [email protected]...