{"id":"CVE-2026-106164","revision":"91e012c87921459e84ffaf8c65721aa1","records":[{"revision":"91e012c87921459e84ffaf8c65721aa1","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-106164","aliases":[],"title":"Infinite Loop in Telerik Document Processing XLS Import","description":"In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.","state":0,"publishedAt":"2026-10-07T18:02:32.641+00:00","modifiedAt":"2026-10-07T19:23:45.883+00:00","affected":[{"ecosystem":"Vendor product","name":"Telerik Document Processing Libraries","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Progress Software\",\n                    \"product\": \"Telerik Document Processing Libraries\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2026.3.811\",\n                            \"lessThan\": \"2026.3.1006\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","score":7.3,"severity":"HIGH"}],"references":["https://www.telerik.com/document-processing-libraries/documentation/knowledge-base/kb-security-import-infinite-loop-cve-2026-106164"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106164","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-106164","identifiers":["CVE-2026-106164"]},"retained":false,"historicalAffected":[]}],"coverage":[]}