https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:02:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374203 EUVD-2026-374203 https://cve.radiocsirt.org/vuln/euvd-2026-374203 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26825 <p>A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialized heap memory originating from the OLE layer (ole2_read). The flaw is detectable with MemorySanitizer (MSAN) and can lead to undefined behavior, incorrect parsing logic, or potential information disclosure.</p> <p>A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialized heap memory originating from the OLE layer (ole2_read). The flaw is detectable with MemorySanitizer (MSAN) and can lead to undefined behavior, incorrect parsing logic, or potential information disclosure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-26825 https://cve.radiocsirt.org/vuln/ghsa-48jr-3rh3-95w6 <p>A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialized heap memory originating from the OLE layer (ole2_read). The flaw is detectable with MemorySanitizer (MSAN) and can lead to undefined behavior, incorrect parsing logic, or potential information disclosure.</p> <p>A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialized heap memory originating from the OLE layer (ole2_read). The flaw is detectable with MemorySanitizer (MSAN) and can lead to undefined behavior, incorrect parsing logic, or potential information disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-48jr-3rh3-95w6 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-26825 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: r-cran-readxl, Ubuntu:18.04:LTS: r-cran-readxl, Ubuntu:20.04:LTS: r-cran-readxl, Ubuntu:22.04:LTS: r-cran-readxl, Ubuntu:24.04:LTS: r-cran-readxl, Ubuntu:25.10: r-cran-readxl, Ubuntu:26.04:LTS: r-cran-readxl</p> <p>A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialized heap memory originating from the OLE layer (ole2_read). The flaw is detectable with MemorySanitizer (MSAN) and can lead to undefined behavior, incorrect parsing logic, or potential information disclosure.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: r-cran-readxl, Ubuntu:18.04:LTS: r-cran-readxl, Ubuntu:20.04:LTS: r-cran-readxl, Ubuntu:22.04:LTS: r-cran-readxl, Ubuntu:24.04:LTS: r-cran-readxl, Ubuntu:25.10: r-cran-readxl, Ubuntu:26.04:LTS: r-cran-readxl</p> <p>A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialized heap memory originating from the OLE layer (ole2_read). The flaw is detectable with MemorySanitizer (MSAN) and can lead to undefined behavior, incorrect parsing logic, or potential information disclosure.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-26825