Fossies

10 CVEs across 2 Fossies products. Browse Fossies vulnerabilities, severities, and proof-of-concept exploits.

Fossies products with known CVEs

ProductCVEs
Catdoc6
Gawk4
Fossies CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-40553High7.52026-07-13Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and…
CVE-2026-40469Critical9.12026-07-13Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata…
CVE-2026-40468Critical9.12026-07-13Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and…
CVE-2026-40467High7.52026-07-13Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in ver…
CVE-2024-54028High8.42025-06-02An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-ba…
CVE-2024-52035High8.42025-06-02An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can…
CVE-2023-46345High7.52023-10-26Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.
CVE-2023-41633Medium5.52023-09-01Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.
CVE-2023-31979High7.82023-05-09Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.
CVE-2017-11110High7.82017-07-08The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possi…