The vulnerability is an untrusted pointer dereference that occurs during XLS processing and conversion in ONLYOFFICE DocumentServer. This flaw allows attackers to read memory contents (information leak) and bypass Address Space Layout Randomization, potentially aiding further exploitation. It is a classic memory safety error marked as CWE‑125.

VERSIONS PRIOR TO 9.3.0 of Ascensio ONLYOFFICE DocumentServer are affected. The issue is present in the document conversion component handling XLS files.

The CVSS score of 5 denotes moderate severity, while the lack of an EPSS score means current exploitation probability is unknown. The weakness does not require local privilege escalation; an attacker only needs to supply a crafted XLS file to the server. Because the flaw can subvert ASLR, attackers that discover it may combine it with other remote exploits. The vulnerability is not listed in the CISA KEV catalog.