https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:56:23.323346+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-48877 CVE-2024-48877 2026-09-29T19:56:23.355400+00:00

Affected: xls2csv

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

 https://vulnerability.circl.lu/vuln/usn-8838-1 USN-8838-1 — catdoc vulnerabilities 2026-09-29T19:56:23.355470+00:00

Affected: Ubuntu:Pro:16.04:LTS: catdoc, Ubuntu:Pro:18.04:LTS: catdoc, Ubuntu:Pro:20.04:LTS: catdoc, Ubuntu:Pro:22.04:LTS: catdoc, Ubuntu:Pro:24.04:LTS: catdoc

It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. (CVE-2024-48877)

It was discovered that catdoc had an integer overflow when processing file allocation tables in malformed document files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. (CVE-2024-52035)

It was discovered that catdoc incorrectly validated sector sizes when processing malformed document files, leading to an integer underflow. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. (CVE-2024-54028)