Vendors / Fossies Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 5 CVSS 7.0–8.9
Exploited now Fossies records in CISA KEV No Fossies vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.00337 · Published 2025-06-02 · No fix listed CWE-191
Priority HIGH 72
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.00337 · Published 2025-06-02 · No fix listed CWE-190
Priority HIGH 67
Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00277 · Published 2023-05-09 · No fix listed CWE-120
Priority MEDIUM 40
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00689 · Published 2023-10-25 · No fix listed CWE-476
Priority LOW 37
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., d…
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01234 · Published 2017-07-08 · No fix listed CWE-787
Priority LOW 24
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00222 · Published 2023-09-01 · No fix listed CWE-476
Priority LOW 23
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine).
CVSS 4.0 MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00291 · Published 2026-07-13 · Partial fix CWE-121
Priority LOW 23
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine).
CVSS 4.0 MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00213 · Published 2026-07-13 · Partial fix CWE-190
Priority LOW 23
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine).
CVSS 4.0 MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00213 · Published 2026-07-13 · Partial fix CWE-416
Priority LOW 11
Integer overflow vulnerability has been found in "builtin.c" program file of gawk.
CVSS 4.0 LOW 2.1· Local · No auth · No interaction · EPSS 0.00201 · Published 2026-07-13 · Partial fix CWE-190
Open these records in search → All records by CVSS severity
Critical0 High5 Medium4 Low1 No CVSS0