Back to overview

CVE-2026-8356

MEDIUM
5.4
CVSS 4.0
Description
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose combined colour counts exceeded the table size wrote past the end of the tables on the stack. In fixed versions the unused second pass is no longer read into those tables.

Metadata

CVE ID
CVE-2026-8356
State
PUBLISHED
Assigner
Document Fdn.
Reserved
2026-05-11 18:42 UTC
Published
2026-06-15 16:23 UTC
Last updated
2026-06-15 18:05 UTC
Primary CWE
CWE-787
CWE-787 Out-of-bounds Write
Vendor / Product
The Document Foundation / LibreOffice
Sources
cve.org  ·  NVD

Severity & Metrics

5.4 MEDIUM CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:P
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
The Document Foundation LibreOffice — 26.2 < < 26.2.4
Weakness (CWE)
CWESourceDescription
CWE-121 cna CWE-121 Stack-based Buffer Overflow
CWE-787 cna CWE-787 Out-of-bounds Write
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.4 MEDIUM 4.0 cna CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:P
References (1)
Back to overview