CVE-2026-8358
Announced: Jun 15, 2026
Fixed in: LibreOffice 26.2.4
Description:
LibreOffice Calc can import tracked changes from a spreadsheet document.
A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation.
In fixed versions records with a duplicate identifier are rejected.
All users are recommended to upgrade to LibreOffice >= 26.2.4 to avoid this problem.
Credits:
Thanks to Anthropic for discovering this issue using automated analysis with Claude.
Thanks to Arthur Chan of Ada Logics for validating and reporting this issue.
Thanks to Caolán McNamara of Collabora for providing the fix.
References:
Sledujte nás