CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

EUVD-2026-75745

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

EUVD-2026-75746

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

PT-2026-89587

Name of the Vulnerable Software and Affected Versions libxls version 1.6.3 Description An out-of-bounds read occurs in the xls dumpSummary function due to insufficient validation of file-controlled OLE summary offsets. An out-of-bounds read is a condition where a program reads data past the end o...

PT-2026-89586

Name of the Vulnerable Software and Affected Versions libxls version 1.6.3 Description Insufficient validation of a file-controlled font index in the xls getCSS function leads to a heap-buffer-overflow and use-after-free. A heap-buffer-overflow occurs when a program writes more data to a...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 . This issue is caused by insufficient validation of file-controlled OLE summary offsets . While the vulnerability is present in several Linux distributions, documentation indicates that some vendors may ...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 . The root cause is the insufficient validation of a file-controlled font index . While the vulnerability has been identified across multiple distributions, some sources indicate that the v...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

[SECURITY] Fedora 43 Update: libxls-1.6.3-5.fc43

This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...

[SECURITY] Fedora 44 Update: libxls-1.6.3-9.fc44

This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...

Fedora 43 : libxls (2026-5dace9d06e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5dace9d06e advisory. - Backport CVE patches - fixes CVE-2026-26824 rhbz2484566 - fixes CVE-2026-26825 rhbz2484567 Tenable has extracted the preceding description block...

Fedora 44 : libxls (2026-73af37bdd0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-73af37bdd0 advisory. - Backport CVE patches - fixes CVE-2026-26824 rhbz2484566 - fixes CVE-2026-26825 rhbz2484567 Tenable has extracted the preceding description block...

Fedora 45 : libxls (2026-914d7851ae)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-914d7851ae advisory. Automatic update for libxls-1.6.3-9.fc45. Changelog Sat Aug 15 2026 Elliott Sales de Andrade - 1.6.3-9 - Backport CVE patches - fixes CVE-2026-26824...

Fedora 46 : libxls (2026-dabb47ed4a)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dabb47ed4a advisory. Automatic update for libxls-1.6.3-9.fc46. Changelog Sat Aug 15 2026 Elliott Sales de Andrade - 1.6.3-9 - Backport CVE patches - fixes CVE-2026-26824...

JLSEC-2026-1301

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table MSAT in readMSAT is not fully initialized before being consumed by ole2validatesectorchain, which may result in application crashe...