« Volver al listado

CVE-2026-26824

Estado: ModificadaMedia (6.5)—

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not fully initialized before being consumed by ole2_validate_sector_chain(), which may result in application crashes or potential information disclosure when processing a crafted XLS file

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Libxls Project — Libxls

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-26824",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-26824",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-06-04T12:24:54.677514Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-06-03T20:16:18.677",
  "references": [
    {
      "url": "https://github.com/libxls/libxls/commit/9adebc9b6d60db21f25ddc898e8760eeb69d6529",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/libxls/libxls/issues/153",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/libxls/libxls/issues/155",
      "tags": [
        "Exploit",
        "Issue Tracking"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/libxls/libxls/issues/155",
      "tags": [
        "Exploit",
        "Issue Tracking"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-457"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not fully initialized before being consumed by ole2_validate_sector_chain(), which may result in application crashes or potential information disclosure when processing a crafted XLS file"
    },
    {
      "lang": "es",
      "value": "libxls hasta la versión 1.6.3 contiene una vulnerabilidad de uso de memoria no inicializada en el analizador de contenedores OLE. La memoria asignada para la Tabla de Asignación de Sectores Maestros (MSAT) en read_MSAT() no se inicializa completamente antes de ser consumida por ole2_validate_sector_chain(), lo que puede resultar en fallos de la aplicación o una potencial revelación de información al procesar un archivo XLS manipulado."
    }
  ],
  "lastModified": "2026-09-23T16:16:42.363",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libxls_project:libxls:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2543F8A-FE1F-419A-B43B-3B2F5CED97E2",
              "versionEndIncluding": "1.6.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}