Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-106164

Infinite Loop in Telerik Document Processing XLS Import

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Telerik Document Processing Libraries

Default version status: unaffected

  • 2026.3.811 to < 2026.3.1006affected

References