LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade autocorr-lbUpgrade libreoffice-gtk3Upgrade libreoffice-help-svUpgrade libreoffice-help-arUpgrade libreoffice-langpack-knUpgrade libreoffice-sdkUpgrade libreoffice-help-taUpgrade libreofficeUpgrade libreoffice-help-zh-HansUpgrade autocorr-elUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-huUpgrade libreoffice-help-heUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-thUpgrade libreoffice-help-lvUpgrade libreoffice-help-elUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-srUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-nlUpgrade libreoffice-sdk-docUpgrade libreoffice-drawUpgrade libreoffice-langpack-afUpgrade libreoffice-help-roUpgrade libreoffice-help-caUpgrade libreoffice-coreUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-veUpgrade libreoffice-help-trUpgrade autocorr-nlUpgrade autocorr-slUpgrade libreoffice-langpack-deUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-heUpgrade autocorr-jaUpgrade libreoffice-langpack-nnUpgrade libreoffice-help-nnUpgrade libreoffice-langpack-arUpgrade libreoffice-langpack-hiUpgrade libreoffice-ure-commonUpgrade libreoffice-langpack-skUpgrade autocorr-esUpgrade autocorr-itUpgrade libreoffice-langpack-eoUpgrade libreoffice-emailmergeUpgrade libreoffice-langpack-kkUpgrade libreoffice-help-enUpgrade autocorr-roUpgrade libreoffice-langpack-cyUpgrade autocorr-frUpgrade libreoffice-help-siUpgrade autocorr-caUpgrade autocorr-koUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-stUpgrade libreoffice-help-frUpgrade libreoffice-langpack-gaUpgrade autocorr-ltUpgrade autocorr-enUpgrade autocorr-bgUpgrade libreoffice-ogltransUpgrade libreoffice-help-huUpgrade libreoffice-help-nlUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-mlUpgrade libreoffice-help-pt-PTUpgrade libreoffice-help-glUpgrade autocorr-mnUpgrade autocorr-daUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-fyUpgrade libreoffice-langpack-mrUpgrade libreoffice-help-esUpgrade libreoffice-langpack-orUpgrade libreoffice-help-etUpgrade libreoffice-langpack-glUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-trUpgrade libreoffice-help-guUpgrade libreoffice-ureUpgrade libreoffice-impressUpgrade libreoffice-filtersUpgrade libreoffice-help-slUpgrade libreoffice-langpack-faUpgrade autocorr-deUpgrade libreoffice-langpack-taUpgrade autocorr-hsbUpgrade libreoffice-langpack-fiUpgrade libreoffice-help-plUpgrade autocorr-skUpgrade libreoffice-langpack-elUpgrade autocorr-hrUpgrade autocorr-afUpgrade autocorr-svUpgrade libreoffice-langpack-slUpgrade autocorr-trUpgrade libreoffice-help-koUpgrade libreoffice-help-fiUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-plUpgrade libreoffice-help-daUpgrade libreoffice-langpack-ruUpgrade libreoffice-baseUpgrade autocorr-viUpgrade libreoffice-langpack-pt-BRUpgrade autocorr-srUpgrade libreoffice-dataUpgrade libreoffice-calcUpgrade libreoffice-pyunoUpgrade libreoffice-help-pt-BRUpgrade autocorr-csUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-svUpgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-langpack-tnUpgrade libreoffice-help-hrUpgrade libreoffice-langpack-nsoUpgrade libreoffice-xsltfilterUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-gdb-debug-supportUpgrade autocorr-plUpgrade libreoffice-langpack-enUpgrade autocorr-ruUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-bgUpgrade libreoffice-x11Upgrade libreoffice-langpack-tsUpgrade libreoffice-help-jaUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-skUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-nrUpgrade libreoffice-writerUpgrade libreoffice-help-idUpgrade autocorr-dsbUpgrade libreoffice-langpack-zuUpgrade libreoffice-help-bgUpgrade autocorr-gaUpgrade libreoffice-langpack-ukUpgrade libreoffice-graphicfilterUpgrade libreoffice-help-ruUpgrade libreoffice-help-euUpgrade libreoffice-mathUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-daUpgrade libreoffice-help-csUpgrade libreofficekitUpgrade autocorr-fiUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-esUpgrade autocorr-isUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-ltUpgrade libreoffice-help-eoUpgrade libreoffice-help-deUpgrade autocorr-vroUpgrade autocorr-huUpgrade autocorr-faUpgrade autocorr-ptUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-etUpgrade autocorr-zhUpgrade libreoffice-langpack-frUpgrade libreoffice-help-it | Oct 15, 2026 | Oct 13, 2026 |
| Debian | — | Upgrade libreoffice | Sep 30, 2026 | Sep 22, 2026 |
| Redhat_linux | — | Upgrade libreoffice-impressUpgrade libreoffice-ogltrans-debuginfoUpgrade libreoffice-help-slUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-eoUpgrade autocorr-viUpgrade libreoffice-langpack-zh-HansUpgrade autocorr-svUpgrade libreoffice-help-huUpgrade autocorr-afUpgrade libreoffice-langpack-dzUpgrade autocorr-ltUpgrade libreoffice-langpack-faUpgrade libreoffice-help-lvUpgrade autocorr-esUpgrade autocorr-csNo solution existsUpgrade libreoffice-help-hrUpgrade libreoffice-calc-debuginfoUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-daUpgrade autocorr-ruUpgrade libreoffice-help-svUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-ukUpgrade libreoffice-coreUpgrade autocorr-deUpgrade libreoffice-help-idUpgrade libreoffice-langpack-arUpgrade libreoffice-help-fiUpgrade libreoffice-langpack-xhUpgrade libreofficeUpgrade libreoffice-langpack-nlUpgrade libreoffice-emailmergeUpgrade libreoffice-langpack-guUpgrade libreoffice-help-daUpgrade libreoffice-ure-debuginfoUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-bnUpgrade libreoffice-help-elUpgrade autocorr-srUpgrade autocorr-frUpgrade autocorr-roUpgrade libreoffice-help-siUpgrade libreoffice-langpack-teUpgrade autocorr-vroUpgrade autocorr-zhUpgrade libreoffice-help-nbUpgrade autocorr-skUpgrade autocorr-isUpgrade libreoffice-debugsourceUpgrade libreoffice-base-debuginfoUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-kkUpgrade libreoffice-langpack-asUpgrade libreoffice-drawUpgrade libreoffice-help-glUpgrade libreoffice-help-heUpgrade libreoffice-sdk-debuginfoUpgrade libreoffice-mathUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-deUpgrade libreoffice-help-ruUpgrade autocorr-itUpgrade libreofficekitUpgrade libreoffice-langpack-csUpgrade libreoffice-impress-debuginfoUpgrade autocorr-hrUpgrade libreoffice-langpack-mlUpgrade libreoffice-help-frUpgrade libreoffice-langpack-orUpgrade libreoffice-sdkUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-brUpgrade autocorr-lbUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-svUpgrade libreoffice-help-zh-HansUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-gaUpgrade libreoffice-help-esUpgrade libreoffice-gtk3Upgrade libreoffice-glade-debuginfoUpgrade libreoffice-help-arUpgrade libreoffice-langpack-srUpgrade libreoffice-ogltransUpgrade autocorr-trUpgrade autocorr-slUpgrade libreoffice-help-guUpgrade libreoffice-writer-debuginfoUpgrade libreoffice-help-csUpgrade autocorr-mnUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-afUpgrade autocorr-huUpgrade libreoffice-langpack-idUpgrade libreoffice-help-ltUpgrade libreoffice-ureUpgrade autocorr-ptUpgrade libreoffice-help-hiUpgrade autocorr-hsbUpgrade libreoffice-help-nnUpgrade autocorr-gaUpgrade libreoffice-langpack-trUpgrade autocorr-fiUpgrade libreoffice-help-bnUpgrade libreoffice-help-zh-HantUpgrade libreoffice-gtk3-debuginfoUpgrade libreoffice-help-skUpgrade libreoffice-help-caUpgrade libreoffice-langpack-nsoUpgrade libreoffice-dataUpgrade libreoffice-langpack-fiUpgrade libreoffice-help-euUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-ruUpgrade libreoffice-langpack-esUpgrade libreoffice-postgresql-debuginfoUpgrade libreoffice-graphicfilterUpgrade libreoffice-baseUpgrade libreoffice-help-eoUpgrade libreoffice-ure-commonUpgrade libreoffice-langpack-tsUpgrade autocorr-nlUpgrade libreoffice-officebean-debuginfoUpgrade libreofficekit-debuginfoUpgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-ltUpgrade autocorr-enUpgrade libreoffice-filtersUpgrade libreoffice-graphicfilter-debuginfoUpgrade autocorr-daUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-glUpgrade libreoffice-calcUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-nrUpgrade autocorr-jaUpgrade libreoffice-langpack-hrUpgrade libreoffice-help-deUpgrade libreoffice-debuginfoUpgrade libreoffice-langpack-mrUpgrade libreoffice-help-enUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-euUpgrade libreoffice-xsltfilterUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-slUpgrade libreoffice-writerUpgrade libreoffice-help-trUpgrade libreoffice-core-debuginfoUpgrade libreoffice-x11-debuginfoUpgrade libreoffice-langpack-pt-PTUpgrade autocorr-koUpgrade libreoffice-help-koUpgrade libreoffice-help-plUpgrade libreoffice-langpack-skUpgrade libreoffice-pdfimportUpgrade autocorr-elUpgrade autocorr-faUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-help-etUpgrade libreoffice-langpack-fyUpgrade libreoffice-langpack-nnUpgrade libreoffice-x11Upgrade libreoffice-langpack-plUpgrade autocorr-dsbUpgrade libreoffice-langpack-etUpgrade libreoffice-help-pt-PTUpgrade libreoffice-help-nlUpgrade libreoffice-help-taUpgrade autocorr-bgUpgrade autocorr-plUpgrade libreoffice-help-dzUpgrade autocorr-caUpgrade libreoffice-help-itUpgrade libreoffice-langpack-taUpgrade libreoffice-help-roUpgrade libreoffice-pdfimport-debuginfoUpgrade libreoffice-pyunoUpgrade libreoffice-pyuno-debuginfoUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-frUpgrade libreoffice-langpack-bg | Sep 28, 2026 | Sep 22, 2026 |
| Rocky_linux | — | Upgrade libreoffice-langpack-kkUpgrade libreoffice-help-plUpgrade libreoffice-sdk-debuginfoUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-svUpgrade libreoffice-graphicfilterUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-skUpgrade libreoffice-help-lvUpgrade libreoffice-help-zh-HansUpgrade libreoffice-ureUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-roUpgrade libreoffice-gtk3Upgrade libreoffice-emailmergeUpgrade libreoffice-debuginfoUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-heUpgrade libreoffice-langpack-pt-PTUpgrade libreofficeUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-caUpgrade libreoffice-help-nnUpgrade libreoffice-help-itUpgrade libreoffice-help-glUpgrade libreoffice-help-enUpgrade libreoffice-help-elUpgrade libreoffice-debugsourceUpgrade libreoffice-ure-debuginfoUpgrade libreoffice-langpack-dzUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-elUpgrade libreoffice-help-trUpgrade libreoffice-langpack-esUpgrade libreofficekitUpgrade libreoffice-langpack-taUpgrade libreoffice-help-deUpgrade libreoffice-coreUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-arUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-bnUpgrade libreoffice-impress-debuginfoUpgrade libreoffice-help-siUpgrade libreoffice-filtersUpgrade libreoffice-drawUpgrade libreoffice-langpack-asUpgrade libreoffice-help-esUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-cyUpgrade libreoffice-help-arUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-calcUpgrade libreoffice-mathUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-nsoUpgrade libreoffice-help-nbUpgrade libreofficekit-debuginfoUpgrade libreoffice-help-euUpgrade libreoffice-x11Upgrade libreoffice-langpack-tnUpgrade libreoffice-baseUpgrade libreoffice-pyuno-debuginfoUpgrade libreoffice-help-dzUpgrade libreoffice-help-pt-BRUpgrade libreoffice-help-huUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-plUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-daUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-trUpgrade libreoffice-langpack-stUpgrade libreoffice-help-zh-HantUpgrade libreoffice-help-daUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-fyUpgrade libreoffice-calc-debuginfoUpgrade libreoffice-sdk-docUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-koUpgrade libreoffice-help-frUpgrade libreoffice-langpack-enUpgrade libreoffice-help-slUpgrade libreoffice-wiki-publisherUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-fiUpgrade libreoffice-langpack-eoUpgrade libreoffice-help-guUpgrade libreoffice-help-fiUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-csUpgrade libreoffice-help-ltUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-deUpgrade libreoffice-impressUpgrade libreoffice-help-nlUpgrade libreoffice-help-hrUpgrade libreoffice-base-debuginfoUpgrade libreoffice-ogltrans-debuginfoUpgrade libreoffice-langpack-mrUpgrade libreoffice-writer-debuginfoUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-frUpgrade libreoffice-langpack-bgUpgrade libreoffice-langpack-afUpgrade libreoffice-help-bnUpgrade libreoffice-gtk3-debuginfoUpgrade libreoffice-writerUpgrade libreoffice-help-ruUpgrade libreoffice-sdkUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-brUpgrade libreoffice-help-hiUpgrade libreoffice-graphicfilter-debuginfoUpgrade libreoffice-core-debuginfoUpgrade libreoffice-x11-debuginfoUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-ltUpgrade libreoffice-help-jaUpgrade libreoffice-help-idUpgrade libreoffice-help-taUpgrade libreoffice-help-svUpgrade libreoffice-help-etUpgrade libreoffice-help-eoUpgrade libreoffice-help-csUpgrade libreoffice-help-caUpgrade libreoffice-xsltfilterUpgrade libreoffice-pdfimport-debuginfoUpgrade libreoffice-pdfimport | Oct 16, 2026 | Oct 14, 2026 |
| Ubuntu | — | Upgrade libreoffice | Oct 6, 2026 | Oct 5, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub