Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:libgepub:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductLibgepub (b48494c3-0b9f-5fc8-b6f8-9eb607a66b3e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libgepub purl2cpe 2026-09-15 20:25:04.073588
pkg:deb/ubuntu/libgepub purl2cpe 2026-09-15 20:25:04.073589
pkg:github/gnome/libgepub purl2cpe 2026-09-15 20:25:04.073591
pkg:gnome/libgepub purl2cpe 2026-09-15 20:25:04.073592
pkg:rpm/fedora/libgepub purl2cpe 2026-09-15 20:25:04.073594
pkg:rpm/opensuse/libgepub purl2cpe 2026-09-15 20:25:04.073595

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6196 vulnerable 2026-06-08 07:43:14.518688 Libgepub: integer overflow in libgepub's epub archive handling
MEDIUM (5.5)
A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories. While no direct remote attack vectors are confirmed, any application using libgepub to parse user-supplied EPUB content could be vulnerable to a denial of service.
Published: 2025-06-17T14:29:42.228Z
Updated: 2025-11-06T23:36:57.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.