CVE-2026-107224 | Qax-os Excelize up to 2.11.0 Zip64 ReadZipReader UncompressedSize64 integer overflow

October 7, 2026 Yanac

A vulnerability marked as problematic has been reported in Qax-os Excelize up to 2.11.0. Affected is the function ReadZipReader of the component Zip64 Handler. The manipulation of the argument UncompressedSize64 leads to integer overflow.

This vulnerability is traded as CVE-2026-107224. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More