CVE-2023-38855

2023-08-1500:00:00

mitre

www.cve.org

buffer overflow

remote code execution

xls file

libxlsv.1.6.2

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

JSON

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.

References

github.com/libxls/libxls/issues/124