Libxls Project / Libxls
20 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-26825 | A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is trig… | MEDIUM | 5.3 | Jun 3, 2026 |
| CVE-2026-26824 | libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocatio… | MEDIUM | 6.5 | Jun 3, 2026 |
| CVE-2023-38856 | libxls: heap buffer overflow in xls_parseWorkBook() in xls.c | MEDIUM | 6.5 | Aug 15, 2023 |
| CVE-2023-38855 | libxls: heap buffer overflow in xls_parseWorkBook() in xls.c | MEDIUM | 6.5 | Aug 15, 2023 |
| CVE-2023-38854 | libxls: heap buffer overflow in xls_parseWorkBook() in xls.c | MEDIUM | 6.5 | Aug 15, 2023 |
| CVE-2023-38853 | libxls: heap buffer overflow in xls_parseWorkBook() in xls.c | MEDIUM | 6.5 | Aug 15, 2023 |
| CVE-2023-38852 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the u… | MEDIUM | 6.5 | Aug 15, 2023 |
| CVE-2023-38851 | libxls: heap buffer overflow in xls_parseWorkBook() in xls.c | MEDIUM | 6.5 | Aug 15, 2023 |
| CVE-2021-27836 | An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file. | MEDIUM | 6.5 | Nov 3, 2021 |
| CVE-2020-27819 | An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing X… | MEDIUM | 5.5 | Feb 23, 2021 |
| CVE-2017-2910 | An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption r… | HIGH | 8.8 | Dec 2, 2020 |
| CVE-2018-20452 | The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly hav… | HIGH | 8.8 | Dec 25, 2018 |
| CVE-2018-20450 | The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a… | MEDIUM | 6.5 | Dec 25, 2018 |
| CVE-2017-12109 | An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS… | HIGH | 8.8 | Apr 24, 2018 |
| CVE-2017-12108 | An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted X… | HIGH | 8.8 | Apr 24, 2018 |
| CVE-2017-2919 | An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory c… | HIGH | 7.8 | Nov 20, 2017 |
| CVE-2017-2897 | An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption res… | HIGH | 7.8 | Nov 20, 2017 |
| CVE-2017-2896 | An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corrup… | HIGH | 7.8 | Nov 20, 2017 |
| CVE-2017-12111 | An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memor… | HIGH | 8.8 | Nov 20, 2017 |
| CVE-2017-12110 | An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resul… | HIGH | 8.8 | Nov 20, 2017 |
Showing 1 to 20 of 20 CVEs