CVE-2026-97222

Awaiting Analysis Awaiting Analysis - Queue

Heap Use-After-Free in Gnumeric Spreadsheet

Publication date: 2026-09-25

Last updated on: 2026-09-30

Assigner: Fedora Project

Description

A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML parser can dereference a freed sheet-object component, causing Gnumeric to crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-30

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-97222

EUVD

EUVD-2026-87095

Affected Vendors & Products

Vendor	Product	Version / Range
gnome	gnumeric	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap use-after-free flaw in Gnumeric. It occurs when a user opens a specially crafted workbook file containing a malformed SheetObjectComponent element. The XML parser incorrectly dereferences a freed sheet-object component, leading to a crash in Gnumeric.

Detection Guidance

This vulnerability can be detected by checking for crashes in Gnumeric when opening suspicious workbooks. Monitor for application crashes or error logs when processing files with SheetObjectComponent elements. No specific commands are provided in the context.

Impact Analysis

This vulnerability could cause Gnumeric to crash when opening a malicious file. It may lead to denial of service, data loss, or potential execution of arbitrary code if exploited. Users should avoid opening untrusted files.

Compliance Impact

This vulnerability primarily causes application crashes due to memory corruption, which could lead to denial-of-service conditions. It does not directly impact data confidentiality, integrity, or privacy as no information disclosure or code execution has been observed. However, if exploited, it could disrupt operations handling sensitive data, potentially affecting compliance with standards requiring availability (e.g., HIPAA for healthcare data). GDPR compliance is less directly impacted unless the crash leads to data processing interruptions.

Mitigation Strategies

Update Gnumeric to the latest patched version. Avoid opening untrusted Gnumeric files, especially those with malformed SheetObjectComponent elements. Monitor vendor advisories for patches.

Hi! I’m here to help you understand CVE-2026-97222. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70