Catdoc
Catdoc Security Releases - October 2026
catdoc-2026-10 Oct 1, 2026 Source: Vendor
Catdoc security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-111126
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-111126
BR2026-0000-032803
catdoc
unclaimed
catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a craft...
Credited as HaiND from the Post and Telecommunication Institute of Technology
CVE-2026-111127
BR2026-0000-032804
catdoc
unclaimed
catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attac...
Credited as HaiND from the Post and Telecommunication Institute of Technology