p PatchFirst

CVE-2026-97222

CVE-2026-97222 · Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML parser can dereference a freed sheet-object component, causing Gnumeric to crash.

CVSS 5.5 · Medium · EPSS 0.1%

Published
Updated

Stack: system

Affected products and versions

  • gnumeric

    Versions
    • ≥ 1.11.0: Affected (semver)
    • bc1dee29525933994181fb2307d6ad584de6040d: Not affected (git)

    No fix published

  • gnumeric Debian:12

    Versions
    • 1.12.55-1
    • 1.12.56-1
    • 1.12.56-2
    • 1.12.57-1
    • 1.12.57-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Debian:13

    Versions
    • 1.12.57-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Debian:14

    Versions
    • 1.12.57-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:16.04:LTS

    Versions
    • 1.12.23-1
    • 1.12.24-1
    • 1.12.26-1
    • 1.12.27-1
    • 1.12.28-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:18.04:LTS

    Versions
    • 1.12.32-1build2
    • 1.12.35-1
    • 1.12.35-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:20.04:LTS

    Versions
    • 1.12.45-1
    • 1.12.45-1build1
    • 1.12.46-1
    • 1.12.46-1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:22.04:LTS

    Versions
    • 1.12.48-1build3
    • 1.12.50-1
    • 1.12.50-1build1
    • 1.12.50-1build2
    • 1.12.51-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:24.04:LTS

    Versions
    • 1.12.55-1
    • 1.12.56-2
    • 1.12.56-2build2
    • 1.12.56-2build4
    • 1.12.56-2build5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:26.10

    Versions
    • 1.12.57-1.1build3
    • 1.12.57-1.1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gnumeric Ubuntu:26.04:LTS

    Versions
    • 1.12.57-1.1build2
    • 1.12.57-1.1build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →