CVE-2026-111132: Gnome Libgxps

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XPS document to crash consumers like Evince and render adjacent heap memory into output.

Affected products

• Gnome Libgxps: up to and including 0.3.2

Published 2026-10-15. Last modified 2026-10-16.