CVE-2026-111127 | catdoc up to 0.95 src/xlsparse.c copy_unicode_string out-of-bounds

October 15, 2026 Yanac

A vulnerability marked as critical has been reported in catdoc up to 0.95. This issue affects the function copy_unicode_string of the file src/xlsparse.c. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2026-111127. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More