Buffer overflow in The Document Foundation Libreoffice
CVE-2026-6047
LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field la…
Vulnerability class: Buffer Overflow
Affected products
- The Document Foundation Libreoffice — versions 25.8, 26.2