CVE-2026-107215

Name of the Vulnerable Software and Affected Versions Excelize versions 2.3.1 through 2.11.0

Description The extractPart() function allocates a byte slice using a CFB directory-entry size provided by the user before validating the sector chain or size domain. Specifically, the function trusts the streamSize for EncryptionInfo and EncryptedPackage allocations. If a crafted OLE compound file specifies a negative or excessively large stream size, it can lead to a negative length being passed to the make function or trigger a multi-gigabyte memory allocation, resulting in a process panic or memory exhaustion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.