CVE-2026-26824

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not fully initialized before being consumed by ole2_validate_sector_chain(), which may result in application crashes or potential information disclosure when processing a crafted XLS file

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/libxls/libxls/issues/155	Exploit Issue Tracking
https://github.com/libxls/libxls/issues/155	Exploit Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:libxls_project:libxls:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-06-03 20:16

Updated : 2026-07-22 20:10

NVD link : CVE-2026-26824

Mitre link : CVE-2026-26824

CVE.ORG link : CVE-2026-26824

JSON object : View

Products Affected

libxls_project

libxls

CWE

CWE-457

Use of Uninitialized Variable

{"id": "CVE-2026-26824", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26824", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-04T12:24:54.677514Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-06-03T20:16:18.677", "references": [{"url": "https://github.com/libxls/libxls/issues/155", "tags": ["Exploit", "Issue Tracking"], "source": "cve@mitre.org"}, {"url": "https://github.com/libxls/libxls/issues/155", "tags": ["Exploit", "Issue Tracking"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-457"}]}], "descriptions": [{"lang": "en", "value": "libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not fully initialized before being consumed by ole2_validate_sector_chain(), which may result in application crashes or potential information disclosure when processing a crafted XLS file"}, {"lang": "es", "value": "libxls hasta la versi\u00f3n 1.6.3 contiene una vulnerabilidad de uso de memoria no inicializada en el analizador de contenedores OLE. La memoria asignada para la Tabla de Asignaci\u00f3n de Sectores Maestros (MSAT) en read_MSAT() no se inicializa completamente antes de ser consumida por ole2_validate_sector_chain(), lo que puede resultar en fallos de la aplicaci\u00f3n o una potencial revelaci\u00f3n de informaci\u00f3n al procesar un archivo XLS manipulado."}], "lastModified": "2026-07-22T20:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:libxls_project:libxls:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2543F8A-FE1F-419A-B43B-3B2F5CED97E2", "versionEndIncluding": "1.6.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}