CVE-2023-34795

HIGH

xlsxio 0.1.2-0.2.34 - Use-After-Free in xlsxioread_sheetlist_close()

Title source: llm
STIX 2.1

Description

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX file.

References (3)

Core 3

Scores

CVSS v3 7.8
EPSS 0.0035
EPSS Percentile 27.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (1)
xlsxio_project/xlsxio 0.1.2 - 0.2.34
Published Jun 16, 2023
Tracked Since Feb 18, 2026