fossies CVE Vulnerabilities & CVE List (6)

Products (CPE): — CVEs: 6

fossies vulnerability overview

Aggregates CVE and security vulnerability intelligence across all fossies-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Historical issues mainly involve vendor risk buffer overflow and vendor risk memory corruption and related problems; some flaws may lead to vendor impact application crash, affecting vendor surface production workloads scenarios.

Vulnerability distribution trend (last 24 months)

Showing 16 of 6 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2024-54028 An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. [email protected] 8.4 0.17% 2025-06-02 2026-02-18
CVE-2024-52035 An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. [email protected] 8.4 0.17% 2025-06-02 2026-02-18
CVE-2023-46345 Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c. [email protected] 7.5 0.09% 2023-10-26 2024-11-21
CVE-2023-41633 Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. [email protected] 5.5 0.02% 2023-09-01 2026-02-18
CVE-2023-31979 Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c. [email protected] 7.8 0.06% 2023-05-09 2026-02-18
CVE-2017-11110 The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer. [email protected] 7.8 0.20% 2017-07-08 2026-05-13
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence