Gnumeric
Monthly
Opening a crafted Gnumeric workbook can trigger a heap use-after-free (CWE-416) during XML parsing of a malformed SheetObjectComponent element, crashing the application and causing a denial of service. This affects GNOME Gnumeric across versions (CPE: cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*). The vulnerability requires local access and user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R), and no public exploit identified at time of analysis.
Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
Opening a crafted Gnumeric workbook can trigger a heap use-after-free (CWE-416) during XML parsing of a malformed SheetObjectComponent element, crashing the application and causing a denial of service. This affects GNOME Gnumeric across versions (CPE: cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*). The vulnerability requires local access and user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R), and no public exploit identified at time of analysis.
Heap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in GNOME Office Gnumeric before 1.12.9 allows remote attackers to cause a denial of service (crash) via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.