CVE-2026-110600 brechtsanders CVE debrief

Who should care

Defenders responsible for systems handling .xlsx files, particularly those using the xlsxio library, should assess exposure and prioritize verification and potential updates. This includes IT teams managing .xlsx file processing, security teams responsible for vulnerability management, and operators of systems that use the xlsxio library. Additionally, vulnerability management teams should review and update their vulnerability management plans to include .

Why it matters

Defenders should prioritize verifying and updating xlsxio to a version beyond 0.2.37 if possible, and assess exposure in systems handling .xlsx files, as the NULL pointer dereference vulnerability allows attackers to crash applications via crafted files.

• Crash applications via crafted files
• Verify xlsxio version and update to a version beyond 0.2.37 if possible
• Assess exposure in systems handling .xlsx files

Technical summary

The xlsxio library through version 0.2.37 contains a NULL pointer dereference vulnerability in the main_sheet_get_sheetfile_expat_callback_element_start() function in lib/xlsxio_read.c. This vulnerability allows attackers to crash applications by supplying a crafted .xlsx file with a workbook.xml.rels containing a worksheet Relationship lacking an Id attribute. The vulnerability has a CVSS score of 6.8 and is considered MEDIUM severity. The xlsxio library is used to read .xlsx files, and the vulnerability can be exploited by supplying a malicious .xlsx file.

Defensive priority

Defenders should prioritize verifying and updating xlsxio to a version beyond 0.2.37 if possible, and assess exposure in systems handling .xlsx files.

Recommended defensive actions

• Verify xlsxio version and update to a version beyond 0.2.37 if possible
• Assess exposure in systems handling .xlsx files
• Implement compensating controls to detect and prevent crafted file uploads
• Review and update incident response plans to include NULL pointer dereference vulnerabilities
• Conduct vulnerability scanning to identify potentially affected systems
• Develop and deploy detection rules to identify potential exploitation attempts
• Track and monitor system logs for unusual activity related to .xlsx file processing

Evidence notes

The CVE record and source item provide details on the NULL pointer dereference vulnerability in xlsxio through 0.2.37. The vulnerability allows attackers to crash applications via crafted .xlsx files.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.