Back Linuxsecurity

Ubuntu catdoc Important Integer Overflow Exploit Advisory USN-8838

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

Several security issues were fixed in catdoc. Software Description: - catdoc: text extractor for MS-Office files Details: It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. (CVE-2024-48877) It was discovered that catdoc had an integer overflow when processing file allocation tables in malformed document files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. (CVE-2024-52035) It was discovered that catdoc incorrectly validated sector sizes when processing malformed document files, leading to an integer underflow. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. (CVE-2024-54028)

Several security issues were fixed in catdoc.

Software Description:

- catdoc: text extractor for MS-Office files

It was discovered that catdoc had an integer overflow when processing

shared string tables in malformed spreadsheet files. An attacker could

possibly use this issue to cause catdoc to crash or execute arbitrary code.

It was discovered that catdoc had an integer overflow when processing file

allocation tables in malformed document files. An attacker could possibly

use this issue to cause catdoc to crash or execute arbitrary code.

It was discovered that catdoc incorrectly validated sector sizes when

processing malformed document files, leading to an integer underflow. An

attacker could possibly use this issue to cause catdoc to crash or execute

arbitrary code. (CVE-2024-54028)

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS catdoc 1:0.95-5ubuntu0.24.04.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS catdoc 1:0.95-5ubuntu0.22.04.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS catdoc 1:0.95-4.1ubuntu0.20.04.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS catdoc 1:0.95-4.1ubuntu0.18.04.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS catdoc 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2024-48877, CVE-2024-52035, CVE-2024-54028

Ubuntu Security Notice USN-8838-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in catdoc Affecting Document Processing Multiple vulnerabilities have been discovered in catdoc, a text extractor for MS-Office files, affecting various Ubuntu versions. The vulnerabilities include integer overflows and an integer underflow when processing malformed spreadsheet and document files, potentially allowing attackers to crash the application or execute arbitrary code. The specific CVEs are CVE-2024-48877, CVE-2024-52035, and CVE-2024-54028, all published on June 2, 2025. Affected Ubuntu versions include 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. Users are advised to update their systems to mitigate these vulnerabilities. The issue was disclosed on September 28, 2026, with a patch available for users. The vulnerabilities were confirmed by CISA and are considered serious due to the potential for remote code execution. 2 sources 58

Extracted Entities

Ubuntu catdoc Important Integer Overflow Exploit Advisory USN-8838

The full story

Extracted Entities

Companies (1)

CVEs (3)

CWE Weaknesses (1)