CVE-2026-107225

Katalog CVE

CVSS 6.5 · Medium EPSS 0,25%

Kerentanan Improper Input Validation pada excelize. Skor CVSS 3.1 6.5 (Medium) menurut github.com.

Deskripsi (NVD)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that allow negative FillID, BorderID, and FontID values to reach slice indexing. When a crafted styles.xml supplies a negative fillId, borderId, or fontId and the application reads the style, a negative identifier passes the upper-bound-only predicate and becomes a negative slice index, allowing an attacker to panic while reading cell styling. No fixed version is available as of this review.

Rincian

Terbit di NVD

7 Oktober 2026

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-129: Improper Validation of Array Index

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/qax-os/excelize/security/advisories/GHSA-5h23-36rv-pm65 exploit · advisory vendor
• https://github.com/qax-os/excelize/commit/ae2113b410e51f6a141c396a59eda8c42b91bc22 patch
• https://github.com/qax-os/excelize/pull/2367 issue tracking · patch