LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libreoffice-ogltransUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-mrUpgrade libreoffice-help-esUpgrade autocorr-deUpgrade libreoffice-langpack-glUpgrade autocorr-koUpgrade autocorr-caUpgrade libreoffice-help-roUpgrade libreoffice-langpack-nlUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-orUpgrade autocorr-roUpgrade autocorr-slUpgrade libreoffice-langpack-knUpgrade libreoffice-help-enUpgrade autocorr-daUpgrade libreoffice-impressUpgrade libreoffice-help-caUpgrade libreoffice-langpack-idUpgrade libreoffice-help-elUpgrade autocorr-enUpgrade libreoffice-filtersUpgrade libreoffice-langpack-koUpgrade autocorr-ltUpgrade libreoffice-langpack-srUpgrade libreoffice-help-etUpgrade libreoffice-langpack-caUpgrade libreoffice-langpack-eoUpgrade autocorr-bgUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-xhUpgrade libreoffice-ure-commonUpgrade libreoffice-help-pt-PTUpgrade libreoffice-help-frUpgrade libreofficeUpgrade autocorr-elUpgrade autocorr-frUpgrade libreoffice-help-heUpgrade libreoffice-help-ukUpgrade libreoffice-help-huUpgrade libreoffice-help-nlUpgrade autocorr-itUpgrade libreoffice-langpack-stUpgrade libreoffice-help-slUpgrade libreoffice-help-glUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-trUpgrade autocorr-mnUpgrade libreoffice-help-zh-HansUpgrade libreoffice-ureUpgrade libreoffice-langpack-thUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-paUpgrade libreoffice-help-arUpgrade libreoffice-sdkUpgrade autocorr-lbUpgrade libreoffice-coreUpgrade libreoffice-gtk3Upgrade libreoffice-help-taUpgrade libreoffice-langpack-kkUpgrade libreoffice-langpack-fyUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-faUpgrade libreoffice-help-siUpgrade libreoffice-help-svUpgrade libreoffice-help-nbUpgrade libreoffice-help-guUpgrade autocorr-jaUpgrade libreoffice-langpack-mlUpgrade libreoffice-emailmergeUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-hiUpgrade libreoffice-sdk-docUpgrade autocorr-nlUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-deUpgrade libreoffice-langpack-heUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-arUpgrade libreoffice-drawUpgrade autocorr-esUpgrade libreoffice-help-trUpgrade libreoffice-help-nnUpgrade libreoffice-help-itUpgrade libreoffice-langpack-svUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-euUpgrade libreoffice-help-jaUpgrade libreoffice-help-plUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-dataUpgrade autocorr-svUpgrade autocorr-hsbUpgrade autocorr-viUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-asUpgrade autocorr-zhUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-plUpgrade libreoffice-langpack-tsUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-nbUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-dzUpgrade libreoffice-help-skUpgrade autocorr-afUpgrade libreoffice-help-idUpgrade libreoffice-writerUpgrade libreoffice-langpack-ruUpgrade libreoffice-baseUpgrade autocorr-ptUpgrade autocorr-fiUpgrade libreoffice-langpack-daUpgrade libreoffice-help-csUpgrade libreoffice-langpack-lvUpgrade libreoffice-langpack-ltUpgrade libreoffice-xsltfilterUpgrade libreoffice-pdfimportUpgrade libreofficekitUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-csUpgrade libreoffice-help-eoUpgrade autocorr-vroUpgrade libreoffice-help-bgUpgrade libreoffice-help-ltUpgrade libreoffice-langpack-frUpgrade libreoffice-help-daUpgrade libreoffice-langpack-elUpgrade libreoffice-graphicfilterUpgrade libreoffice-wiki-publisherUpgrade autocorr-plUpgrade autocorr-ruUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-brUpgrade autocorr-huUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-euUpgrade libreoffice-help-pt-BRUpgrade autocorr-faUpgrade autocorr-csUpgrade libreoffice-x11Upgrade libreoffice-langpack-etUpgrade libreoffice-help-zh-HantUpgrade libreoffice-help-deUpgrade autocorr-skUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-nsoUpgrade autocorr-trUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-zuUpgrade libreoffice-mathUpgrade libreoffice-help-hrUpgrade libreoffice-langpack-bgUpgrade libreoffice-help-koUpgrade libreoffice-help-bnUpgrade libreoffice-pyunoUpgrade autocorr-srUpgrade autocorr-isUpgrade autocorr-hrUpgrade autocorr-dsbUpgrade autocorr-gaUpgrade libreoffice-help-fiUpgrade libreoffice-langpack-ssUpgrade libreoffice-calcUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-fi | Oct 15, 2026 | Oct 13, 2026 |
| Debian | — | Upgrade libreoffice | Sep 30, 2026 | Sep 22, 2026 |
| Redhat_linux | — | Upgrade libreoffice-help-ruUpgrade libreoffice-langpack-mlUpgrade libreoffice-drawUpgrade autocorr-lbUpgrade libreoffice-langpack-heUpgrade libreoffice-impressUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-bnUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-huUpgrade libreoffice-help-huUpgrade libreoffice-langpack-svUpgrade libreoffice-langpack-arUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-knUpgrade autocorr-deUpgrade autocorr-itUpgrade autocorr-svUpgrade libreoffice-help-daUpgrade libreoffice-coreUpgrade libreoffice-langpack-eoUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-frUpgrade libreoffice-ogltrans-debuginfoUpgrade libreofficeUpgrade libreoffice-emailmergeUpgrade libreoffice-help-arUpgrade libreoffice-help-svUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-ukUpgrade libreoffice-sdkUpgrade autocorr-ltUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-gaUpgrade autocorr-viUpgrade libreofficekitUpgrade autocorr-srUpgrade autocorr-trUpgrade autocorr-afUpgrade libreoffice-glade-debuginfoUpgrade libreoffice-langpack-zh-HansUpgrade autocorr-isUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-dzUpgrade libreoffice-debugsourceUpgrade libreoffice-help-siUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-kkUpgrade autocorr-slUpgrade libreoffice-langpack-teUpgrade libreoffice-help-zh-HansUpgrade libreoffice-langpack-thUpgrade libreoffice-help-heUpgrade libreoffice-gtk3Upgrade libreoffice-langpack-stUpgrade autocorr-zhUpgrade libreoffice-mathUpgrade libreoffice-sdk-debuginfoUpgrade autocorr-skUpgrade libreoffice-base-debuginfoUpgrade autocorr-hrUpgrade libreoffice-help-glUpgrade autocorr-esUpgrade libreoffice-help-nbNo solution existsUpgrade autocorr-csUpgrade libreoffice-langpack-deUpgrade libreoffice-langpack-asUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-paUpgrade libreoffice-langpack-daUpgrade libreoffice-langpack-tnUpgrade libreoffice-help-slUpgrade libreoffice-langpack-cyUpgrade libreoffice-calc-debuginfoUpgrade autocorr-frUpgrade libreoffice-help-hrUpgrade autocorr-roUpgrade libreoffice-impress-debuginfoUpgrade libreoffice-help-esUpgrade libreoffice-help-idUpgrade libreoffice-help-elUpgrade autocorr-vroUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-srUpgrade libreoffice-ogltransUpgrade libreoffice-ure-debuginfoUpgrade autocorr-ruUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-help-fiUpgrade libreoffice-help-euUpgrade libreoffice-calcUpgrade libreoffice-help-pt-BRUpgrade libreoffice-help-taUpgrade libreoffice-help-bnUpgrade libreoffice-langpack-fyUpgrade libreoffice-help-bgUpgrade libreoffice-gdb-debug-supportUpgrade autocorr-gaUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-enUpgrade libreoffice-langpack-euUpgrade libreoffice-writer-debuginfoUpgrade libreoffice-langpack-jaUpgrade libreoffice-help-guUpgrade libreoffice-help-csUpgrade libreoffice-graphicfilter-debuginfoUpgrade libreoffice-graphicfilterUpgrade autocorr-daUpgrade libreoffice-xsltfilterUpgrade autocorr-fiUpgrade libreoffice-help-nlUpgrade libreoffice-langpack-ssUpgrade libreoffice-ure-commonUpgrade libreoffice-langpack-frUpgrade libreoffice-postgresql-debuginfoUpgrade autocorr-nlUpgrade autocorr-koUpgrade libreoffice-writerUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-lvUpgrade libreoffice-help-jaUpgrade libreoffice-dataUpgrade libreoffice-help-pt-PTUpgrade autocorr-plUpgrade libreoffice-pyuno-debuginfoUpgrade libreoffice-langpack-taUpgrade libreoffice-help-dzUpgrade autocorr-bgUpgrade libreoffice-pdfimport-debuginfoUpgrade libreoffice-help-ltUpgrade libreoffice-pdfimportUpgrade libreoffice-help-etUpgrade libreoffice-langpack-zuUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-afUpgrade libreoffice-help-nnUpgrade libreoffice-help-hiUpgrade libreoffice-help-caUpgrade autocorr-mnUpgrade autocorr-hsbUpgrade libreoffice-langpack-trUpgrade autocorr-ptUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-trUpgrade autocorr-caUpgrade libreoffice-langpack-plUpgrade libreoffice-help-plUpgrade libreoffice-x11Upgrade libreoffice-pyunoUpgrade libreoffice-officebean-debuginfoUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-caUpgrade libreoffice-help-itUpgrade libreofficekit-debuginfoUpgrade libreoffice-baseUpgrade libreoffice-core-debuginfoUpgrade libreoffice-x11-debuginfoUpgrade libreoffice-wiki-publisherUpgrade autocorr-jaUpgrade libreoffice-help-eoUpgrade libreoffice-langpack-elUpgrade libreoffice-debuginfoUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-ltUpgrade libreoffice-help-deUpgrade autocorr-enUpgrade libreoffice-langpack-nrUpgrade libreoffice-help-roUpgrade libreoffice-help-enUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-mrUpgrade libreoffice-filtersUpgrade libreoffice-langpack-etUpgrade autocorr-huUpgrade libreoffice-gtk3-debuginfoUpgrade libreoffice-help-skUpgrade libreoffice-ureUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-nsoUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-fiUpgrade autocorr-faUpgrade autocorr-elUpgrade autocorr-dsbUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-bgUpgrade libreoffice-help-ko | Sep 28, 2026 | Sep 22, 2026 |
| Rocky_linux | — | Upgrade libreoffice-langpack-daUpgrade libreoffice-ogltrans-debuginfoUpgrade libreoffice-langpack-trUpgrade libreoffice-sdkUpgrade libreoffice-langpack-knUpgrade libreoffice-help-zh-HantUpgrade libreoffice-langpack-paUpgrade libreoffice-help-daUpgrade libreoffice-help-ukUpgrade libreoffice-langpack-plUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-etUpgrade libreoffice-langpack-maiUpgrade libreoffice-help-hrUpgrade libreoffice-help-nlUpgrade libreoffice-help-slUpgrade libreoffice-langpack-deUpgrade libreoffice-langpack-tnUpgrade libreoffice-base-debuginfoUpgrade libreoffice-langpack-mrUpgrade libreoffice-pdfimportUpgrade libreoffice-pdfimport-debuginfoUpgrade libreoffice-langpack-euUpgrade libreoffice-langpack-nsoUpgrade libreoffice-help-pt-BRUpgrade libreoffice-langpack-teUpgrade libreoffice-help-huUpgrade libreofficekit-debuginfoUpgrade libreoffice-help-ltUpgrade libreoffice-langpack-hrUpgrade libreoffice-impressUpgrade libreoffice-writerUpgrade libreoffice-x11-debuginfoUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-csUpgrade libreoffice-pyuno-debuginfoUpgrade libreoffice-help-idUpgrade libreoffice-help-jaUpgrade libreoffice-help-caUpgrade libreoffice-langpack-heUpgrade libreoffice-core-debuginfoUpgrade libreoffice-xsltfilterUpgrade libreoffice-help-pt-PTUpgrade libreoffice-langpack-frUpgrade libreoffice-langpack-afUpgrade libreoffice-help-eoUpgrade libreoffice-wiki-publisherUpgrade libreoffice-writer-debuginfoUpgrade libreoffice-langpack-thUpgrade libreoffice-gtk3-debuginfoUpgrade libreoffice-langpack-itUpgrade libreoffice-langpack-nrUpgrade libreoffice-help-bnUpgrade libreoffice-help-etUpgrade libreoffice-help-frUpgrade libreoffice-help-koUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-enUpgrade libreoffice-x11Upgrade libreoffice-calc-debuginfoUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-guUpgrade libreoffice-langpack-eoUpgrade libreoffice-help-fiUpgrade libreoffice-langpack-fiUpgrade libreoffice-help-euUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-fyUpgrade libreoffice-help-svUpgrade libreoffice-help-ruUpgrade libreoffice-langpack-stUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-glUpgrade libreoffice-langpack-huUpgrade libreoffice-langpack-ltUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-bgUpgrade libreoffice-baseUpgrade libreoffice-graphicfilter-debuginfoUpgrade libreoffice-help-hiUpgrade libreoffice-langpack-brUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-taUpgrade libreoffice-langpack-zuUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-asUpgrade libreoffice-calcUpgrade libreoffice-langpack-kkUpgrade libreoffice-help-plUpgrade libreoffice-sdk-debuginfoUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-mathUpgrade libreoffice-help-csUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-gaUpgrade libreoffice-ogltransUpgrade libreoffice-langpack-svUpgrade libreoffice-help-esUpgrade libreoffice-help-arUpgrade libreoffice-langpack-slUpgrade libreoffice-langpack-siUpgrade libreoffice-langpack-bnUpgrade libreoffice-impress-debuginfoUpgrade libreoffice-help-siUpgrade libreoffice-filtersUpgrade libreoffice-drawUpgrade libreoffice-gtk3Upgrade libreoffice-ureUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-help-zh-HansUpgrade libreoffice-help-roUpgrade libreoffice-emailmergeUpgrade libreoffice-debuginfoUpgrade libreofficeUpgrade libreoffice-langpack-ukUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-xhUpgrade libreoffice-langpack-lvUpgrade libreofficekitUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-langpack-koUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-elUpgrade libreoffice-help-trUpgrade libreoffice-help-bgUpgrade libreoffice-graphicfilterUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-nlUpgrade libreoffice-help-lvUpgrade libreoffice-langpack-ssUpgrade libreoffice-help-heUpgrade libreoffice-help-skUpgrade libreoffice-langpack-guUpgrade libreoffice-langpack-dzUpgrade libreoffice-langpack-caUpgrade libreoffice-help-nnUpgrade libreoffice-help-itUpgrade libreoffice-help-glUpgrade libreoffice-help-enUpgrade libreoffice-help-elUpgrade libreoffice-debugsourceUpgrade libreoffice-ure-debuginfoUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-langpack-orUpgrade libreoffice-langpack-jaUpgrade libreoffice-help-deUpgrade libreoffice-coreUpgrade libreoffice-langpack-taUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-ar | Oct 16, 2026 | Oct 14, 2026 |
| Ubuntu | — | Upgrade libreoffice | Oct 6, 2026 | Oct 5, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub