CVE-2023-38854

CVE-2023-38854 affects libxls v1.6.2. Root cause: a buffer overflow in transcode_latin1_to_utf8 (xlstool.c:296) can allow a remote attacker to execute arbitrary code and cause denial of service via a crafted XLS file. The connected sources confirm the vulnerability details and suggest a temporary...