CVE-2026-107221 | qax-os Excelize up to 2.11.0 Non-streaming Worksheet API GetCellValue out-of-bounds

A vulnerability categorized as problematic has been discovered in qax-os Excelize up to 2.11.0. The impacted element is the function GetCellValue of the component Non-streaming Worksheet API. Such manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-107221. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More