CVEvulnerability

CVE-2026-107218

5.3 MEDIUM Published 2026-10-07 Modified 2026-10-13 Official page ↗
Status
Analyzed
Published
2026-10-07
Last modified
2026-10-13
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-129

Description

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but slices a rune array using Unicode code-point counts. RIGHT reaches leftRight through CalcCellValue, where countUTF16String validates one unit but utf8.RuneCountInString supplies the slice index in another. When RIGHT evaluates supplementary-plane text with a requested character count between the rune count and UTF-16 code-unit count, the inconsistent units produce a negative rune-slice index, allowing an attacker to panic during formula evaluation. No fixed version is available as of this review.

Affected configurations

• excelize excelize (>= 2.10.1 <= 2.11.0)

Related

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References