PT-2025-12683 · Gnome · Gnome Libgsf

Published 2025-03-24 · Updated 2025-03-25 · CVE-2025-2720

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GNOME libgsf versions up to 1.14.53

Description A vulnerability was found in the function gsf base64 encode simple. The manipulation of the argument size leads to the use of an uninitialized variable. The attack needs to be approached locally.

Recommendations For versions up to 1.14.53, as a temporary workaround, consider restricting the use of the gsf base64 encode simple function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-457

CWE-453

Related Identifiers

BDU:2025-07132

CVE-2025-2720

Affected Products

Gnome Libgsf

References · 16

• https://ubuntu.com/security/CVE-2025-2720 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2720 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-2720 · Security Note
• https://bdu.fstec.ru/vul/2025-07132 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-2720 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-2720 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-2720 · Vendor Advisory
• https://vuldb.com/?id.300740 · Note
• https://gnome.org · Note
• https://access.redhat.com/security/cve/cve-2025-2720 · Note
• https://vuldb.com/?ctiid.300740 · Note
• https://vuldb.com/?submit.520180 · Note
• https://twitter.com/WolfgangSesin/status/1904158235260489911 · Twitter Post
• https://t.me/cvedetector/21018 · Telegram Post
• https://twitter.com/CVEnew/status/1904317719408996389 · Twitter Post