Lucene search
+L

12 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/16 12:00 a.m.•11 views

UBUNTU-CVE-2026-111127

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/16 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-111127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/15 7:17 p.m.•23 views

DEBIAN-CVE-2026-111127

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/15 7:17 p.m.•11 views

CVE-2026-111127

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS0.00127EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/15 7:17 p.m.•13 views

CVE-2026-111127

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/15 6:57 p.m.•9 views

CVE-2026-111127 catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/15 6:57 p.m.•29 views

CVE-2026-111127

The catdoc utility (versions through 0.95 ) is vulnerable to an out-of-bounds read in the copy_unicode_string() function located in src/xlsparse.c. This flaw stems from an unchecked string character count , where an attacker can provide a crafted .xls file declaring 0xFFFF two-byte characters wit...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/15 6:57 p.m.•10 views

CVE-2026-111127 catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Mend
Mend
•added 2026/10/15 6:57 p.m.•14 views

CVE-2026-111127

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/15 6:57 p.m.•36 views

CVE-2026-111127 catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS0.00127EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/15 6:57 p.m.•13 views

EUVD-2026-102358

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•11 views

CVE-2026-111127: Out-of-bounds Read

catdoc through 0.95 contains an out-of-bounds read vulnerability in copyunicodestring in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST record...

6.9CVSS5.9AI score0.00127EPSS
SaveExploits0References2
Rows per page
Query Builder