{"id":"CVE-2018-7435","aliases":["DEBIAN-CVE-2018-7435","DLA-1297-1","DSA-4129-1","EUVD-2018-19166","GHSA-m5h7-xcc6-3xwx","UBUNTU-CVE-2018-7435","openSUSE-SU-2018:0569-1","openSUSE-SU-2018:0570-1","openSUSE-SU-2024:10771-1"],"status":"published","title":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the...","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02135,"percentile":0.82112,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-02-23T21:00:00Z","modified":"2026-10-23T18:03:08Z","fixes":[{"ecosystem":"Debian:12","package":"freexl","fixed_in":["1.0.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freexl","fixed_in":["1.0.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freexl","fixed_in":["1.0.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"freexl","fixed_in":["1.0.0g-1ubuntu0.14.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"freexl","fixed_in":["1.0.2-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0b-1+deb7u5"}]}],"versions":["1.0.0b-1","1.0.0b-1+deb7u1","1.0.0b-1+deb7u2","1.0.0b-1+deb7u3","1.0.0b-1+deb7u4"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0g-1+deb8u5"}]}],"versions":["1.0.0g-1+deb8u1","1.0.0g-1+deb8u2","1.0.0g-1+deb8u3","1.0.0g-1+deb8u4"],"bundled":5},{"source":"osv","ecosystem":"Debian:9","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2+deb9u2"}]}],"versions":["1.0.2-2","1.0.2-2+deb9u1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0g-1ubuntu0.14.04.3"}]}],"versions":["1.0.0d-1","1.0.0f-1","1.0.0f-2","1.0.0g-1","1.0.0g-1ubuntu0.14.04.1","1.0.0g-1ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1ubuntu0.1"}]}],"versions":["1.0.2-1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freexl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1.3"}]}],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"freexl_project","product":"freexl"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://groups.google.com/forum/#%21topic/spatialite-users/b-d9iB5TDPE","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.debian.org/security/2018/dsa-4129","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547879","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.gentoo.org/glsa/202007-44","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7435"},{"url":"https://groups.google.com/forum/#!topic/spatialite-users/b-d9iB5TDPE","tags":["report"]},{"url":"https://github.com/advisories/GHSA-m5h7-xcc6-3xwx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-7435","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-7435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7435","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ITMXPOUUKGX36CVA3DDP2X6VCTFASB4F/#ITMXPOUUKGX36CVA3DDP2X6VCTFASB4F","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082774","tags":["report"]},{"url":"https://bugzilla.suse.com/1082775","tags":["report"]},{"url":"https://bugzilla.suse.com/1082776","tags":["report"]},{"url":"https://bugzilla.suse.com/1082777","tags":["report"]},{"url":"https://bugzilla.suse.com/1082778","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7439","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/A4VIPIGOMLGFC6DNGBBZ3X5PEKNGL2PW/#A4VIPIGOMLGFC6DNGBBZ3X5PEKNGL2PW","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2924","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-7435","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2018-02-23T21:00:00Z","modified":"2024-08-05T06:24:12.003Z","updated_at":"2026-11-02T14:35:10.313768Z"}],"euvd":[{"id":"EUVD-2018-19166","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2018-02-23T21:00:00Z","modified":"2024-08-05T06:24:12Z","updated_at":"2026-11-03T02:40:05.625439Z"}],"ghsa":[{"id":"GHSA-m5h7-xcc6-3xwx","title":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the...","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2022-05-13T01:25:06Z","modified":"2023-02-01T05:07:13Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:30.568005Z"}],"nvd":[{"id":"CVE-2018-7435","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2018-02-23T21:29:00.303Z","modified":"2026-06-17T02:03:07.193Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"CVE-2018-7435","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2018-02-23T21:29:00.303Z","modified":"2026-03-15T22:23:28.357428Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"DEBIAN-CVE-2018-7435","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2018-02-23T21:29:00.303Z","modified":"2026-10-23T18:03:08.831169031Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-7435","description":"An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroy_cell function.","status":"published","published":"2018-02-23T21:29:00Z","modified":"2026-04-22T12:03:28.432332Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"DLA-1297-1","title":"freexl - security update","status":"published","published":"2018-03-01T00:00:00Z","modified":"2026-03-09T01:01:19.128608Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4129-1","title":"freexl - security update","status":"published","published":"2018-03-02T00:00:00Z","modified":"2026-03-09T01:20:19.24182Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2018:0569-1","title":"Security update for freexl","description":"This update for freexl fixes the following issues:\n\nfreexl was updated to version 1.0.5:\n\n* No changelog provided by upstream\n* Various heapoverflows in 1.0.4 have been fixed:\n\n    * CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 read_mini_biff_next_record (boo#1082774)\n    * CVE-2018-7438: heap-buffer-overflow in freexl.c:383 parse_unicode_string (boo#1082775)\n    * CVE-2018-7437: heap-buffer-overflow in freexl.c:1866 parse_SST(boo#1082776)\n    * CVE-2018-7436: heap-buffer-overflow in freexl.c:1805 parse_SST parse_SST (boo#1082777)\n    * CVE-2018-7435: heap-buffer-overflow in freexl::destroy_cell (boo#1082778)\n\n","status":"published","published":"2018-03-01T08:28:24Z","modified":"2026-02-04T03:25:03.712365Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:0570-1","title":"Security update for freexl","description":"This update for freexl fixes the following issues:\n\nfreexl was updated to version 1.0.5:\n\n* No changelog provided by upstream\n* Various heapoverflows in 1.0.4 have been fixed:\n\n    * CVE-2018-7439: heap-buffer-overflow in freexl.c:3912 read_mini_biff_next_record (boo#1082774)\n    * CVE-2018-7438: heap-buffer-overflow in freexl.c:383 parse_unicode_string (boo#1082775)\n    * CVE-2018-7437: heap-buffer-overflow in freexl.c:1866 parse_SST(boo#1082776)\n    * CVE-2018-7436: heap-buffer-overflow in freexl.c:1805 parse_SST parse_SST (boo#1082777)\n    * CVE-2018-7435: heap-buffer-overflow in freexl::destroy_cell (boo#1082778)\n\n","status":"published","published":"2018-03-01T08:28:24Z","modified":"2026-02-04T04:34:49.160384Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10771-1","title":"freexl-devel-1.0.6-1.3 on GA media","description":"These are all security issues fixed in the freexl-devel-1.0.6-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:16.702616Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}