CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

libxls 安全漏洞

libxls is an open-source C library for reading old binary OLE format Excel files. Version 1.6.3 of libxls contains a security vulnerability. This vulnerability stems from the use of uninitialized memory during the parsing of malformed XLS files, which may lead to undefined behavior, parsing error...

PT-2026-46057

Name of the Vulnerable Software and Affected Versions libxls versions prior to 1.6.4 Description The OLE container parser contains an issue where memory allocated for the Master Sector Allocation Table MSAT in the read MSAT function is not fully initialized before being used by the ole2 validate...

CVE-2026-26825

Libxls 1.6.3 contains a use-of-uninitialized memory vulnerability when parsing malformed XLS files. The issue is triggered by uninitialized heap memory originating from the OLE layer (ole2_read) and is reachable via xls_parseWorkBook(). MemorySanitizer can detect it; the advisory notes undefined ...

CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

PT-2026-46058

Name of the Vulnerable Software and Affected Versions libxls version 1.6.3 Description A use-of-uninitialized memory issue occurs when parsing malformed XLS files. The flaw is triggered by uninitialized heap memory originating from the OLE layer ole2 read and is reachable via the xls parseWorkBoo...

CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

EUVD-2020-20320

Malware in sbrugna...

EUVD-2017-3695

Malware in sbrugna...

EUVD-2017-3692

Malware in sbrugna...

EUVD-2017-3694

Malware in sbrugna...

EUVD-2017-12060

Malware in sbrugna...

EUVD-2017-12051

Malware in sbrugna...

EUVD-2018-13007

Malware in sbrugna...

EUVD-2017-12037

Malware in sbrugna...

EUVD-2017-12038

Malware in sbrugna...

EUVD-2018-13005

Malware in sbrugna...

EUVD-2017-3693

Malware in sbrugna...

EUVD-2021-14575

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-12110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow vulnerability exists in the xlsappendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulti...