5.4
Moyenne
CVE-2026-63275 LibreOffice can read CFF fonts, which may be embedded in documents
Description
LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LibreOffice 26.2 | 26.2 → dernières | Pas de correctif indiqué |
Références
- www.libreoffice.org www.libreoffice.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de LibreOffice
Les 48 CVE de LibreOffice →
CVE-2026-76181
Heap buffer overflow in dBASE index import
5.4
Moyenne
CVE-2026-63270
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information…
6.7
Moyenne
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer
6.7
Moyenne
CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document
6.7
Moyenne