An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12110.json"