CVE-2026-63273
Announced: Sep 21, 2026
Fixed in: LibreOffice 26.2.5
Description:
LibreOffice Draw can import PDF documents.
A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document’s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end.
In fixed versions a declared key length larger than the buffer is rejected.
All users are recommended to upgrade to LibreOffice >= 26.2.5 to avoid this problem.
Credits:
Thanks to Claude and Ada Logics – found by Anthropic using agents to study the security of open-source projects, with Ada Logics validating and reporting.
Thanks to Caolán McNamara of Collabora Productivity for providing the fix.
References:
Sledujte nás