428 matches found
CVE-2020-2555
EXP 테스트...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-poi (UTSA-2026-093250)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093250 advisory. In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker...
CLSA-2026-1782435542 TuxCare security update for org.apache.poi (1 CVE)
TuxCare rebuilt 6 org.apache.poi packages to address 1 CVE. Fixed in 3.10-FINAL-tuxcare.3...
CLSA-2026-1778028244 TuxCare security update for org.apache.poi (1 CVE)
TuxCare rebuilt 6 org.apache.poi packages to address 1 CVE. Fixed in 4.1.2-tuxcare.2...
CLSA-2026-1777941834 TuxCare security update for org.apache.poi (5 CVEs)
TuxCare rebuilt 6 org.apache.poi packages to address 5 CVEs. Fixed in 3.10-FINAL-tuxcare.1...
Security Bulletin:IBM Storage Protect Server is affected by a vulnerability in the Apache POI library that could lead to denial-of-service when processing specially crafted archive files (CVE-2019-12415).
Summary IBM Storage Protect Server uses the Apache POI library in certain components; this library is vulnerable to processing specially crafted archive files that may cause excessive memory allocation, potentially leading to a denial-of-service condition. Vulnerability Details CVEID:CVE-2019-124...
Security Bulletin: IBM Engineering Lifecycle Management - Doors Next is impacted by vulnerabilities
Summary A vulnerability has been identified in poi-ooxml library, which is used in IBM Engineering Lifecycle Management - Doors Next. Vulnerability Details CVEID:CVE-2025-31672 DESCRIPTION: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files...
Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Apache POI and Apache Commons Lang
Summary IBM SPSS Modeler is affected by vulnerabilities in Apache POI and Apache Commons Lang. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2025-31672 DESCRIPTION: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML...
apache-poi:POIFileHandlerFuzzer: Security exception in org.apache.poi.hemf.record.emf.HemfMisc$EmfExtCreatePen.init
Detailed Report: https://oss-fuzz.com/testcase?key=6348265548480512 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIFileHandlerFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by potential data integrity and denial of service due to Apache POI
Summary Apache POI in Apache Solr is used by IBM Operations Analytics - Log Analysis as part of extracting text and metadata from document files. CVE‑2022‑26336, CVE‑2025‑31672 Vulnerability Details CVEID:CVE-2025-31672 DESCRIPTION: Improper Input Validation vulnerability in Apache POI. The issue...
Security Bulletin:IBM Storage Protect Server is affected by a vulnerability in the Apache POI library that could lead to denial-of-service when processing specially crafted archive files (CVE-2019-12415).
Summary IBM Storage Protect Server uses the Apache POI library in certain components; this library is vulnerable to processing specially crafted archive files that may cause excessive memory allocation, potentially leading to a denial-of-service condition. Vulnerability Details CVEID:CVE-2019-124...
Security Bulletin: IBM Operational Decision Manager for March 2026 - Multiple CVEs addressed
Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-41254...
apache-poi:POIFileHandlerFuzzer: Security exception in org.apache.poi.hemf.record.emf.HemfDraw$EmfPolyDraw.init
Detailed Report: https://oss-fuzz.com/testcase?key=6368629896839168 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIFileHandlerFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-poi:POIHSSFFuzzer: Security exception in java.base/javax.crypto.spec.SecretKeySpec.getEncoded
Detailed Report: https://oss-fuzz.com/testcase?key=4558141168877568 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
OSV-2026-297 Security exception in org.apache.poi.util.IOUtils.safelyAllocate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486522036 Crash type: Security exception Crash state: org.apache.poi.util.IOUtils.safelyAllocate org.apache.poi.hssf.record.RecordInputStream.readRemainder org.apache.poi.hssf.record.UnknownRecord...
PT-2026-24094
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486522036 Crash type: Security exception Crash state: org.apache.poi.util.IOUtils.safelyAllocate org.apache.poi.hssf.record.RecordInputStream.readRemainder org.apache.poi.hssf.record.UnknownRecord...
apache-poi:POIHSSFFuzzer: Security exception in org.apache.poi.util.IOUtils.safelyAllocate
Detailed Report: https://oss-fuzz.com/testcase?key=4605841981636608 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.util.IOUtils.safelyAllocate...
apache-poi:POIHSSFFuzzer: Security exception in POIHSSFFuzzer
Detailed Report: https://oss-fuzz.com/testcase?key=5364264486633472 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: POIHSSFFuzzer Sanitizer: address ASAN...
apache-poi:POIHSSFFuzzer: Security exception in java.base/sun.security.provider.DigestBase.engineDigest
Detailed Report: https://oss-fuzz.com/testcase?key=6396064881246208 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-poi:POIHSSFFuzzer: Security exception in java.base/sun.security.jca.GetInstance.getInstance
Detailed Report: https://oss-fuzz.com/testcase?key=4577455462744064 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...