CVE-2026-26825

CVE-2026-26825 affects libxls 1.6.3 when parsing malformed XLS files. The issue is a use-of-uninitialized memory in the heap originating from the OLE layer (ole2_read), reachable via xls_parseWorkBook(). Impact is undefined behavior, potentially incorrect parsing logic or information disclosure; ...