https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-2924.htmlhttps://patchthecve.com/cve/CVE-2017-2924.htmlWed, 17 Jun 2026 01:17:08 +0000HIGH 8.8: An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2017-2923.htmlhttps://patchthecve.com/cve/CVE-2017-2923.htmlWed, 17 Jun 2026 01:17:08 +0000HIGH 8.8: An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2018-7439.htmlhttps://patchthecve.com/cve/CVE-2018-7439.htmlWed, 17 Jun 2026 02:03:07 +0000HIGH 8.8: An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function read_mini_biff_next_record.https://patchthecve.com/cve/CVE-2018-7438.htmlhttps://patchthecve.com/cve/CVE-2018-7438.htmlWed, 17 Jun 2026 02:03:07 +0000HIGH 8.8: An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parse_unicode_string function.https://patchthecve.com/cve/CVE-2018-7437.htmlhttps://patchthecve.com/cve/CVE-2018-7437.htmlWed, 17 Jun 2026 02:03:07 +0000HIGH 8.8: An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parse_SST function.https://patchthecve.com/cve/CVE-2018-7436.htmlhttps://patchthecve.com/cve/CVE-2018-7436.htmlWed, 17 Jun 2026 02:03:07 +0000HIGH 8.8: An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function.https://patchthecve.com/cve/CVE-2018-7435.htmlhttps://patchthecve.com/cve/CVE-2018-7435.htmlWed, 17 Jun 2026 02:03:07 +0000HIGH 8.8: An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.