Home/Product/libxls project libxls
Product

libxls project libxls

20 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-26825
all versions
A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xl
5.3MEDIUM
CVE-2026-26824
<= 1.6.3
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated fo
6.5MEDIUM
CVE-2023-38856
all versions
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service vi
6.5MEDIUM
CVE-2023-38855
all versions
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service vi
6.5MEDIUM
CVE-2023-38854
all versions
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service vi
6.5MEDIUM
CVE-2023-38853
all versions
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service vi
6.5MEDIUM
CVE-2023-38852
all versions
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service vi
6.5MEDIUM
CVE-2023-38851
all versions
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service vi
6.5MEDIUM
CVE-2021-27836
all versions
An issue was discoverered in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service,
6.5MEDIUM
CVE-2020-27819
< 1.6.2
An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulner
5.5MEDIUM
CVE-2017-2910
all versions
An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file ca
8.8HIGH
CVE-2018-20452
all versions
The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (appli
8.8HIGH
CVE-2018-20450
all versions
The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application
6.5MEDIUM
CVE-2017-12109
all versions
An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK rec
8.8HIGH
CVE-2017-12108
all versions
An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK
8.8HIGH
CVE-2017-2919
all versions
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted
7.8HIGH
CVE-2017-2897
all versions
An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can
7.8HIGH
CVE-2017-2896
all versions
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS f
7.8HIGH
CVE-2017-12111
all versions
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a f
8.8HIGH
CVE-2017-12110
all versions
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can
8.8HIGH
threatengine.sh