CVE-2024-48877

Katalog CVE

CVSS 7.8 · High EPSS 0,33%

Kerentanan Integer Overflow to Buffer Overflow pada wagner xls2csv. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD

2 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-680: Integer Overflow to Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2128 exploit · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2128 exploit · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/06/msg00032.html