CVE-2026-79592 is a high-severity vulnerability in libxls 1.6.3, allowing for out-of-bounds reads due to insufficient validation of OLE summary offsets. Defenders should assess exposure, prioritize remediation, and verify affected versions. The vulnerability exists in the xls_dumpSummary() function, which fails to properly validate file-controlled OLE summary offsets, potentially allowing attackers to rea [truncated]
A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index. This CVE record was published on 2026-09-10T21:17:46.933Z and has not been modified since then. The NVD entry is currently 7.8 HIGH. The vulnerability affects systems or applications using the libxls library, requiring verification of l [truncated]
