Vulnerability Spotlight: Multiple vulnerabilities in Soft Maker Office Plan Maker
Summary: Cisco Talos researchers found multiple vulnerabilities in the PlanMaker spreadsheet component of SoftMaker Office 2021 (Revision 1014), including integer overflow, out-of-bounds write, and heap-based buffer overflow flaws in its document-parsing functionality. Each is triggered by opening a specially crafted document and can corrupt memory, potentially allowing code execution under the context of the application; Talos worked with SoftMaker on a coordinated disclosure and an update is available.
Key Takeaway: These are file-open vulnerabilities in an office suite that supports common spreadsheet formats, so a single malicious document delivered to a user is enough to trigger memory corruption and possible code execution. Talos confirmed the flaws against SoftMaker Office PlanMaker 2021 Revision 1014, which means any organization running that build is exposed until it patches.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-13579CVE-2020-13580CVE-2020-13581CVE-2020-13586
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026