CVE-2018-7436

HIGH 8.8CVE-2018-7436 · Published 23/02/2018 · updated 17/06/2026

In short

CVE-2018-7436 is a HIGH (CVSS 8.8) vulnerability affecting freexl (freexl project).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 82.1% of all vulnerabilities.
Fix: update to 1.0.5 or later.

Package	Affected versions	Patched versions
freexl freexl_project	`< 1.0.5`	`1.0.5`

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.0.5

1.0.5

More vulnerabilities in freexl

See all →