Libxls_project Libxls
20 CVEs affecting Libxls_project Libxls. Latest disclosed: 2026-06-03. Critical: 0, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-2910 | High | 8.8 | 2020-12-02 | An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption r… |
CVE-2018-20452 | High | 8.8 | 2018-12-25 | The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly hav… |
CVE-2017-12109 | High | 8.8 | 2018-04-24 | An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS… |
CVE-2017-12108 | High | 8.8 | 2018-04-24 | An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a MULBLANK record. A specially crafted X… |
CVE-2017-12111 | High | 8.8 | 2017-11-20 | An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memor… |
CVE-2017-12110 | High | 8.8 | 2017-11-20 | An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resul… |
CVE-2017-2919 | High | 7.8 | 2017-11-20 | An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory c… |
CVE-2017-2897 | High | 7.8 | 2017-11-20 | An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption res… |
CVE-2017-2896 | High | 7.8 | 2017-11-20 | An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corrup… |
CVE-2026-26824 | Medium | 6.5 | 2026-06-03 | libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocatio… |
CVE-2023-38856 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the g… |
CVE-2023-38855 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the g… |
CVE-2023-38854 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the t… |
CVE-2023-38853 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the x… |
CVE-2023-38852 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the u… |
CVE-2023-38851 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the x… |
CVE-2021-27836 | Medium | 6.5 | 2021-11-03 | An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file. |
CVE-2018-20450 | Medium | 6.5 | 2018-12-25 | The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a… |
CVE-2020-27819 | Medium | 5.5 | 2021-02-23 | An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing X… |
CVE-2026-26825 | Medium | 5.3 | 2026-06-03 | A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is trig… |