Skip to content
OpenAdvisories
High · 8.8 CVE-2023-31275 EUVD-2023-35589GHSA-cfc9-f8qw-f5wh

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel fi…

Published Nov 27, 2023 · Updated Feb 25, 2026 · Assigned by talos

Description

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
WPS WPS Office 11.2.0.11537 —

References