PT-2026-24094

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486522036 Crash type: Security exception Crash state: org.apache.poi.util.IOUtils.safelyAllocate org.apache.poi.hssf.record.RecordInputStream.readRemainder org.apache.poi.hssf.record.UnknownRecord...

OSV-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051 Crash type: Security exception Crash state: org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID...

PT-2023-35573 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security issue has been identified, which can cause a crash. The crash occurs in the Biff8DecryptingStream class, specifically in the isNeverEncryptedRecord and readRecordSID methods,...