LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.
CVSS Details
- CVSS 4.0 Base Score: 5.4 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libreoffice-dataUpgrade libreoffice-help-esUpgrade libreoffice-langpack-guUpgrade libreoffice-rhinoUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-trUpgrade autocorr-itUpgrade libreofficeUpgrade libreoffice-help-koUpgrade libreoffice-help-roUpgrade libreoffice-wiki-publisherUpgrade libreoffice-help-plUpgrade libreoffice-help-nnUpgrade libreoffice-langpack-nrUpgrade libreoffice-help-caUpgrade libreoffice-coreUpgrade libreoffice-langpack-enUpgrade libreoffice-emailmergeUpgrade libreoffice-help-trUpgrade libreoffice-langpack-esUpgrade libreofficekit-develUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-glUpgrade libreoffice-help-ukUpgrade autocorr-enUpgrade libreoffice-drawUpgrade autocorr-mnUpgrade autocorr-daUpgrade autocorr-fiUpgrade libreoffice-sdkUpgrade autocorr-frUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-dzUpgrade autocorr-roUpgrade libreoffice-help-guUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-ltUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-nsoUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-itUpgrade libreoffice-help-zh-HansUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-mrUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-arUpgrade autocorr-koUpgrade libreoffice-gladeUpgrade libreoffice-gtk3Upgrade libreoffice-langpack-taUpgrade libreoffice-xsltfilterUpgrade libreofficekitUpgrade libreoffice-x11Upgrade autocorr-jaUpgrade libreoffice-help-etUpgrade autocorr-nlUpgrade libreoffice-help-euUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-roUpgrade libreoffice-postgresqlUpgrade libreoffice-nlpsolverUpgrade libreoffice-help-ltUpgrade libreoffice-help-siUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-hiUpgrade autocorr-gaUpgrade libreoffice-langpack-koUpgrade libreoffice-ureUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-plUpgrade libreoffice-langpack-nnUpgrade libreoffice-help-elUpgrade libreoffice-help-svUpgrade libreoffice-langpack-bgUpgrade autocorr-bgUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-caUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-zuUpgrade libreoffice-help-bgUpgrade libreoffice-impressUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-csUpgrade autocorr-caUpgrade libreoffice-help-glUpgrade libreoffice-ure-commonUpgrade autocorr-lbUpgrade libreoffice-help-ruUpgrade libreoffice-baseUpgrade autocorr-trUpgrade autocorr-srUpgrade autocorr-isUpgrade autocorr-esUpgrade libreoffice-help-idUpgrade libreoffice-gtk2Upgrade libreoffice-help-deUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-skUpgrade libreoffice-help-skUpgrade libreoffice-help-frUpgrade autocorr-faUpgrade libreoffice-officebean-commonUpgrade libreoffice-langpack-asUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-knUpgrade libreoffice-help-slUpgrade libreoffice-help-huUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-thUpgrade libreoffice-officebeanUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-bnUpgrade libreoffice-help-taUpgrade libreoffice-help-hrUpgrade libreoffice-help-daUpgrade libreoffice-filtersUpgrade libreoffice-debuginfoUpgrade libreoffice-bshUpgrade autocorr-svUpgrade libreoffice-pdfimportUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-lvUpgrade libreoffice-calcUpgrade libreoffice-langpack-tnUpgrade libreoffice-writerUpgrade libreoffice-langpack-euUpgrade autocorr-ltUpgrade autocorr-slUpgrade libreoffice-librelogoUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-xhUpgrade autocorr-deUpgrade libreoffice-langpack-daUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-graphicfilterUpgrade autocorr-viUpgrade autocorr-skUpgrade autocorr-hrUpgrade libreoffice-mathUpgrade libreoffice-langpack-frUpgrade autocorr-huUpgrade libreoffice-langpack-zh-HantUpgrade autocorr-csUpgrade libreoffice-langpack-nlUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-nbUpgrade autocorr-zhUpgrade autocorr-plUpgrade libreoffice-help-arUpgrade autocorr-ruUpgrade autocorr-ptUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-stUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-csUpgrade libreoffice-langpack-deUpgrade libreoffice-opensymbol-fontsUpgrade autocorr-afUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-langpack-kkUpgrade libreoffice-langpack-etUpgrade libreoffice-help-zh-Hant | Oct 19, 2026 | Oct 19, 2026 |
| Debian | — | Upgrade libreoffice | Jun 18, 2026 | Jun 18, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 15, 2026 |
| Ubuntu | — | Upgrade libreoffice | Jul 14, 2026 | Jul 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub