PatchTheCVE: libdochttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-7233: In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.https://patchthecve.com/cve/CVE-2019-7233.htmlhttps://patchthecve.com/cve/CVE-2019-7233.htmlWed, 17 Jun 2026 02:40:17 +0000HIGH 8.8: In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.CVE-2019-7156: In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.https://patchthecve.com/cve/CVE-2019-7156.htmlhttps://patchthecve.com/cve/CVE-2019-7156.htmlWed, 17 Jun 2026 02:40:11 +0000MEDIUM 6.5: In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.CVE-2018-20453: The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows https://patchthecve.com/cve/CVE-2018-20453.htmlhttps://patchthecve.com/cve/CVE-2018-20453.htmlWed, 17 Jun 2026 01:52:52 +0000MEDIUM 6.5: The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.CVE-2018-20451: The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allohttps://patchthecve.com/cve/CVE-2018-20451.htmlhttps://patchthecve.com/cve/CVE-2018-20451.htmlWed, 17 Jun 2026 01:52:52 +0000MEDIUM 6.5: The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.