Lucene search
+L

7 matches found

Snyk
Snyk
•added 2026/03/03 3:43 p.m.•16 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the xlnt::detail::binarywriter::append function in the Compound Document Parser process. An attacker can cause a heap-based buffer overflow by providing specially crafted input to this function during loca...

7.8CVSS5.8AI score0.00203EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/03 12:02 p.m.•67 views

CVE-2026-3463 xlnt-community xlnt Compound Document binary.hpp append heap-based overflow

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

4.8CVSS0.00203EPSS
SaveExploits1References8
Mend
Mend
•added 2026/03/03 12:02 p.m.•26 views

CVE-2026-3463

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

7.8CVSS5AI score0.00203EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2026/03/03 12:02 p.m.•25 views

CVE-2026-3463 xlnt-community xlnt Compound Document binary.hpp append heap-based overflow

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

4.8CVSS5.7AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/03 12:00 a.m.•8 views

CVE-2026-3463: Heap-based Buffer Overflow

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

7.8CVSS5AI score0.00203EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/03 12:00 a.m.•30 views

xlnt security vulnerabilities

xlnt is an open-source C++ language library developed by the xlnt-community. Versions of xlnt 1.6.1 and earlier contain security vulnerabilities. These vulnerabilities stem from a buffer overflow vulnerability in the function xlnt::detail::binarywriter::append located in the...

7.8CVSS5.7AI score0.00203EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/03/03 12:00 a.m.•34 views

PT-2026-22730

Name of the Vulnerable Software and Affected Versions xlnt-community xlnt versions up to 1.6.1 Description A flaw exists in xlnt-community xlnt up to version 1.6.1 related to the xlnt::detail::binary writer::append function within the source/detail/binary.hpp file of the Compound Document Parser...

7.8CVSS5.5AI score0.00203EPSS
SaveExploits1References18
Rows per page
Query Builder