https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T00:52:04.592644+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111127 CVE-2026-111127 — catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string 2026-10-25T00:52:04.594028+00:00

Affected: catdoc

catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST records to disclose adjacent memory through xls2csv output or crash the process.