Catdoc

This hub aggregates every CVE we track for Catdoc, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Catdoc.

• CVE-2024-52035An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. ...8.4Jun 2, 2025
• CVE-2024-54028An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can...8.4Jun 2, 2025
• CVE-2023-46345Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.7.5Oct 25, 2023
• CVE-2023-41633Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.5.5Sep 1, 2023
• CVE-2023-31979Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.7.8May 9, 2023
• CVE-2017-11110The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via ...7.8Jul 8, 2017
• CVE-2003-0193msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").2.1Jun 3, 2004