A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-c...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 r-cran-readxl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 r-cran-readxl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 r-cran-readxl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

advisory security-tracker.debian.org