18697 matches found
CVE-2024-48877
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-48877
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-48877
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-48877
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-48877
CVE-2024-48877 describes a memory corruption in the xls2csv 0.95 Shared String Table Record Parser, leading to a heap buffer overflow when processing a crafted file. The CVE is reflected across multiple advisories: Debian has released fixes (catdoc 0.95-4.1+deb11u1 for Bullseye and 0.95-6~deb12u1...
CVE-2024-48877
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
Catdoc xls2csv utility Shared String Table Record Parser memory corruption vulnerability
Talos Vulnerability Report TALOS-2024-2128 Catdoc xls2csv utility Shared String Table Record Parser memory corruption vulnerability June 2, 2025 CVE Number CVE-2024-48877 SUMMARY A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility...
PT-2025-23526
Name of the Vulnerable Software and Affected Versions xls2csv utility version 0.95 Description A memory corruption issue exists in the Shared String Table Record Parser implementation. This can be triggered by a specially crafted malformed file, leading to a heap buffer overflow. An attacker can...
PUB-A-386346571
In ProtocolMiscCurrentLinkCapacityEstimate of protocolmiscadapter.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-382577130
In wlescanhandler of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-301470262
In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-353958315
In nvtflashread of nt36xxx.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-394084586
In MMMMNRMMDLNASTRANSPORTINDHandler of cnNrmmIntHdlr.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-383628266
In smsSetTpUdIe of smsPduCodec.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-394726109
Analysis: Access Vector: Local Layer: Userland Root Causes: Heap Buffer Overflow SRS Categories: - Android Security SRS Category: Memory Safety Writeup: A stack trace alone with PoC app is insufficient to determine if this represents a genuine memory corruption vulnerability reachable by an...
CVE-2025-44905
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
AZL-62267 CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
CVE-2025-44904
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
GNU PSPP Heap Buffer Overflow Vulnerability
GNU PSPP is an application for data sampling, statistics and analysis from the American GNU community. GNU PSPP suffers from a heap buffer overflow vulnerability. The vulnerability stems from the failure of the inflateread function called indirectly by spvreadxmlmember in zip-reader.c to properly...