Skip to content

Instantly share code, notes, and snippets.

@rycbar77

rycbar77/Strftime-Nullptr-Dereference

Last active February 28, 2026 07:22
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save rycbar77/d747b2c37b544ece30b2353a65ab41f9 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save rycbar77/d747b2c37b544ece30b2353a65ab41f9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Strftime-Nullptr-Dereference
[CVE ID]
CVE-2023-46345
[PRODUCT]
Catdoc
[VERSION]
0.95
[PROBLEM TYPE]
Null Pointer Deference
[DESCRIPTION]
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.
@ajakk
Copy link

ajakk commented Nov 4, 2023

Where is the upstream report?

@iamleot
Copy link

iamleot commented Oct 10, 2025

Hello @rycbar77! Have you reported that upstream?

Thanks!

@skierpage
Copy link

skierpage commented Feb 28, 2026

It's possible one of the commits I made to src/slxparse.c in my fork of catdoc in February 2026 has fixed this, but I don't (yet) have access to the POC file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment