CVE-2026-106164 — Infinite Loop in Telerik Document Processing XLS Import

CVE-2026-106164

Infinite Loop in Telerik Document Processing XLS Import PUBLISHED

Description (CNA)

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.

Affected (CNA)

Vendor / product	Versions
Progress Software / Telerik Document Processing Libraries	affected 2026.3.811 before 2026.3.1006

CWE

CWE-835

References

https://www.telerik.com/document-processing-libraries/documentation/knowledge-base/kb-security-import-infinite-loop-cve-2026-106164

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.