vulnerability

Gentoo Linux: CVE-2024-12425: LibreOffice: Multiple Vulnerabilities

Severity
2
CVSS
(AV:L/AC:M/Au:S/C:N/I:P/A:N)
Published
Jan 7, 2025
Added
Jun 13, 2025
Modified
Aug 13, 2025

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal.

An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files.

This issue affects LibreOffice: from 24.8 before < 24.8.4.

Solutions

gentoo-linux-upgrade-app-office-libreofficegentoo-linux-upgrade-app-office-libreoffice-bin
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.