TI-2026-45135 CVE-2026-63279 · GHSA-v5cv-mqwj-8jgx
Out of bounds read in PICT image import
Priority LOW 23
LibreOffice can import PICT images, which may be embedded in documents.
Vulnerabilities
7 records
TI-2026-45134 CVE-2026-63278 · GHSA-74rr-xj7r-w3qp
Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
Priority LOW 29
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.
TI-2026-45133 CVE-2026-63276 · GHSA-3xpv-4h8q-pj26
Stack buffer overflow in CFF to Type 1 font conversion
Priority LOW 24
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents.
TI-2026-45132 CVE-2026-63275 · GHSA-fh9h-5g6m-wc43
Stack buffer overflow in CFF font hint handling
Priority LOW 24
LibreOffice can read CFF fonts, which may be embedded in documents.
TI-2026-45131 CVE-2026-63274 · GHSA-q9rh-47xp-mj2m
Heap buffer overflow in PDF import stream handling
Priority LOW 24
LibreOffice Draw can import PDF documents.
TI-2026-45130 CVE-2026-63273 · GHSA-254q-47m3-r67w
Heap buffer overflow in PDF import encryption handling
Priority LOW 23
LibreOffice Draw can import PDF documents.
TI-2026-45129 CVE-2026-63272 · GHSA-c374-v965-jr6c
Heap buffer overflow in WMF text record import
Priority LOW 24
LibreOffice can import WMF graphics, which may be embedded in documents.