Is CVE-2026-111127 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111127?

CVE-2026-111127 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-111127

Description

catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST records to disclose adjacent memory through xls2csv output or crash the process.