https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T21:37:08.118206+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-16860 bdu:2026-16860 2026-10-24T21:37:08.121040+00:00 bdu:2026-16860 https://db.gcve.eu/vuln/fkie_cve-2026-111126 fkie_cve-2026-111126 2026-10-24T21:37:08.121145+00:00

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2csv to disclose adjacent process memory as CSV cells or crash the process.

 https://db.gcve.eu/vuln/ghsa-gc5h-x8q8-5m4r GHSA-gc5h-x8q8-5m4r 2026-10-24T21:37:08.121195+00:00

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2csv to disclose adjacent process memory as CSV cells or crash the process.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-111126 UBUNTU-CVE-2026-111126 2026-10-24T21:37:08.121214+00:00

Affected: Ubuntu:Pro:16.04:LTS: catdoc, Ubuntu:Pro:18.04:LTS: catdoc, Ubuntu:Pro:20.04:LTS: catdoc, Ubuntu:Pro:22.04:LTS: catdoc, Ubuntu:Pro:24.04:LTS: catdoc, Ubuntu:26.10: catdoc, Ubuntu:26.04:LTS: catdoc

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2csv to disclose adjacent process memory as CSV cells or crash the process.