Lucene search
+L

6 matches found

OSV
OSV
added 2026/06/03 8:16 p.m.14 views

DEBIAN-CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

5.3CVSS5.4AI score0.00214EPSS
SaveExploits1References1
OSV
OSV
added 2026/06/03 12:0 a.m.7 views

CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

5.3CVSS6AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/03 12:0 a.m.8 views

CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

5.8AI score0.00214EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/06/03 12:0 a.m.10 views

CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

5.5AI score0.00214EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.22 views

PT-2026-46058

Name of the Vulnerable Software and Affected Versions libxls version 1.6.3 Description A use-of-uninitialized memory issue occurs when parsing malformed XLS files. The flaw is triggered by uninitialized heap memory originating from the OLE layer ole2 read and is reachable via the xls parseWorkBoo...

5.3CVSS5.8AI score0.00214EPSS
SaveExploits1References11
CVE
CVE
added 2026/06/03 12:0 a.m.49 views

CVE-2026-26825

Libxls 1.6.3 contains a use-of-uninitialized memory vulnerability when parsing malformed XLS files. The issue is triggered by uninitialized heap memory originating from the OLE layer (ole2_read) and is reachable via xls_parseWorkBook(). MemorySanitizer can detect it; the advisory notes undefined ...

5.3CVSS5.8AI score0.00214EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder