Buffer overflow in The Document Foundation Libreoffice

CVE-2026-6047

LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field la…

Vulnerability class: Buffer Overflow

EPSS: 0.001 (2.1th percentile) — read the EPSS interpretation.