CVE-2026-3463 | xlnt-community xlnt up to 1.6.1 Compound Document Parser source/detail/binary.hpp append heap-based overflow (Issue 138 / ID 147)

A vulnerability classified as problematic has been found in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-3463. The attack can only be executed locally. Furthermore, there is an exploit available.

It is suggested to install a patch to address this issue.