5.4
Medium
CVE-2026-4430 Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched…
Description
Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibreOffice 26.2 | 26.2 → < 26.2.3 | 26.2.3 |
| LibreOffice 25.8 | 25.8 → < 25.8.7 | 25.8.7 |
References
- www.libreoffice.org www.libreoffice.org
Timeline
- Published
- Last modified
Other CVEs of LibreOffice
The 48 CVEs of LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Medium
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Medium
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Medium
CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document
6.7
Medium