Integer Overflow Vulnerability in OLE Document File Parser of Catdoc
CVE-2024-52035

8.4HIGH

Key Information:

Vendor

Catdoc

Status
Vendor
CVE Published:
2 June 2025

What is CVE-2024-52035?

An integer overflow vulnerability in the OLE Document File Allocation Table Parser of Catdoc v0.95 allows attackers to exploit specially crafted malformed files. This exploit can result in heap-based memory corruption, enabling potential malicious activities. Users should be cautious of untrusted document files to mitigate the risks associated with this vulnerability.

Affected Version(s)

catdoc 0.95

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by a member of Cisco Talos.
.