CVE-2024-22368

CVE-2024-22368 is an out-of-memory vulnerability in the Spreadsheet::ParseXLSX package for Perl, affecting versions prior to 0.28. This flaw allows an attacker to trigger a denial-of-service condition by crafting a malicious XLSX document that exploits improper constraints in the memoize implementation for merged cells. Rated Medium severity (CVSS 5.5), it requires user interaction (opening the malicious file) and has a high impact on availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.