CVE-2023-41633

MediumCVSS 5.5

Published: 01/09/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Version 0.95 of Catdoc was found to contain a NULL pointer dereference vulnerability in the xls2csv component at src/fileutil.c.

An attacker could exploit this vulnerability to cause application crashes, potentially leading to service disruptions.

It is recommended to update to the latest version of Catdoc to mitigate this vulnerability.

Original NVD description (English source)

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.