CVE-2026-107220 | qax-os excelize up to 2.11.0 mergeCellsParser cellInRange out-of-bounds

A vulnerability was found in qax-os excelize up to 2.11.0 and classified as problematic. This vulnerability affects the function cellInRange of the component mergeCellsParser. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is tracked as CVE-2026-107220. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More