Out-of-Bounds Read Vulnerability in Catdoc Product by vbwagner
CVE-2026-111126
6.9MEDIUM
What is CVE-2026-111126?
Catdoc versions up to 0.95 are susceptible to an out-of-bounds read vulnerability affecting the MULRK record handler within the process_item() function in src/xlsparse.c. By supplying a crafted .xls workbook or a malformed BIFF stream with an extensive end column parameter to the xls2csv utility, an attacker can exploit this flaw to read memory outside of the intended buffer. This may result in disclosure of sensitive data from adjacent memory, or potentially crash the processing application, highlighting a significant security concern for users of Catdoc.
Affected Version(s)
catdoc 0 <= 0.95
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology