6.9
Moyenne
CVE-2026-111132 GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to…
Description
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XPS document to crash consumers like Evince and render adjacent heap memory into output.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libgxps 0.3 | premières → 0.3.2 | Pas de correctif indiqué |
Références
- hackmd.io hackmd.io
- gitlab.gnome.org gitlab.gnome.org
- gitlab.gnome.org gitlab.gnome.org
- gitlab.gnome.org gitlab.gnome.org
- VulnCheck Advisory: GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element www.vulncheck.com
Chronologie
- Publiée
- Dernière modification