{"schemaVersion":3,"id":"USN-8838-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"catdoc vulnerabilities\n\nIt was discovered that catdoc had an integer overflow when processing\nshared string tables in malformed spreadsheet files. An attacker could\npossibly use this issue to cause catdoc to crash or execute arbitrary code.\n(CVE-2024-48877)\n\nIt was discovered that catdoc had an integer overflow when processing file\nallocation tables in malformed document files. An attacker could possibly\nuse this issue to cause catdoc to crash or execute arbitrary code.\n(CVE-2024-52035)\n\nIt was discovered that catdoc incorrectly validated sector sizes when\nprocessing malformed document files, leading to an integer underflow. An\nattacker could possibly use this issue to cause catdoc to crash or execute\narbitrary code. (CVE-2024-54028)","dates":{"published":"2026-09-28T15:01:41.000Z","modified":"2026-09-28T22:57:42.488Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"catdoc","name":"catdoc","label":"catdoc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/catdoc","purlType":"deb","versions":[{"text":"< 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:0.95-4.1ubuntu0.18.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:0.95-4.1ubuntu0.20.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:0.95-5ubuntu0.22.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:0.95-5ubuntu0.24.04.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1 | < 1:0.95-4.1ubuntu0.18.04.1~esm1 | < 1:0.95-4.1ubuntu0.20.04.1~esm1 | < 1:0.95-5ubuntu0.22.04.1~esm1 | < 1:0.95-5ubuntu0.24.04.1~esm1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8838-1","label":"ubuntu.com/security/notices/USN-8838-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-48877","label":"ubuntu.com/security/CVE-2024-48877","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-52035","label":"ubuntu.com/security/CVE-2024-52035","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-54028","label":"ubuntu.com/security/CVE-2024-54028","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2024-48877","CVE-2024-52035","CVE-2024-54028"],"downstream":[],"duplicates":[],"related":["CVE-2024-48877","CVE-2024-52035","CVE-2024-54028"]},"timeline":[{"kind":"published","date":"2026-09-28T15:01:41.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-28T22:57:42.488Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T10:43:48.743Z","stale":false,"partial":false}}