JLSEC-2026-1301

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table MSAT in readMSAT is not fully initialized before being consumed by ole2validatesectorchain, which may result in application crashe...

PT-2026-80543

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table MSAT in read MSAT is not fully initialized before being consumed by ole2 validate sector chain, which may result in application...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable in the readMSAT function. An attacker can cause application crashes or potentially disclose sensitive information by submitting a specially crafted XLS file. Remediation There is no fixed version for libxls...

CVE-2026-26824

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table MSAT in readMSAT is not fully initialized before being consumed by ole2validatesectorchain, which may result in application crashe...

Linux Distros Unpatched Vulnerability : CVE-2018-20450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a...

libxls Denial of Service Vulnerability

libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in the 'readMSATbody' function of the ole.c file in libxls version 1.4.0, which can be exploited by an attacker to cause a denial of service application crash with the help of a specially crafted file...

UBUNTU-CVE-2018-20450

The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...

DEBIAN-CVE-2018-20450

The readMSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2017-2897...

DEBIAN-CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

PT-2018-15385

Name of the Vulnerable Software and Affected Versions libxls version 1.4.0 Description The issue is related to a double free in the read MSAT function in ole.c, which can cause a denial of service, resulting in an application crash when a crafted file is processed. Recommendations For libxls...

PT-2018-15387

Name of the Vulnerable Software and Affected Versions libxls version 1.4.0 Description The issue is related to an invalid free in the read MSAT body function in ole.c, which can be triggered by a crafted file. This is due to inconsistent memory management in the ole2 read header function. Attacke...

libxls out-of-bounds write vulnerability (CNVD-2017-37753)

libxls is a C library that can read Excel xls files. An out-of-bounds write vulnerability exists in the readMSAT function in libxls 1.4. An attacker can exploit this vulnerability by sending a malicious XLS file to cause a memory corruption that could lead to remote code execution...

DEBIAN-CVE-2017-2897

An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

UBUNTU-CVE-2017-2897

An exploitable out-of-bounds write vulnerability exists in the readMSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

PT-2017-15605

Name of the Vulnerable Software and Affected Versions libxls version 1.4 Description An exploitable out-of-bounds write vulnerability exists in the read MSAT function. A specially crafted XLS file can cause memory corruption, resulting in remote code execution. An attacker can send a malicious XL...