CVE-2026-63273

Status: Received

Description

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.

Published
September 22, 2026 12:17 PM
Last Modified
September 22, 2026 1:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-787

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.