CVE-2026-26825

A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggered by uninitialized heap memory originating from the OLE layer ole2read. The flaw is detectable with MemorySanitizer MSAN and can lead to...

PT-2023-26632 · Libxls +1 · Libxls +1

Name of the Vulnerable Software and Affected Versions: libxls version 1.6.2 Description: The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls parseWorkBook function in xls.c:1018. This is a buffer overflow vulnerability...

PT-2023-26634 · Libxls +1 · Libxls +1

Name of the Vulnerable Software and Affected Versions: libxls version 1.6.2 Description: The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls parseWorkBook function in xls.c:1015. This can lead to the execution of arbitrary...