CVE-2024-54028

catdoc / catdoc PUBLISHED

Description (CNA)

An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Affected (CNA)

Vendor / product	Versions
catdoc / catdoc	affected 0.95

CWE

CWE-191

References

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2132

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2132
https://lists.debian.org/debian-lts-announce/2025/06/msg00032.html