Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
LibreOffice may crash or run malicious code
published 1 month ago
Summary
LibreOffice can mishandle certain image, PDF, font, and package files, which could cause the program to stop working or let an attacker run unwanted code or view hidden data. The risk affects anyone who opens such crafted documents with LibreOffice. Install the latest LibreOffice updates to fix these handling errors.
What to do
- Update canonical libreoffice to version 1:7.3.7-0ubuntu0.22.04.13.
- Update canonical libreoffice to version 4:24.2.7-0ubuntu0.24.04.7.
- Update canonical libreoffice to version 4:26.2.6.3-0ubuntu0.26.04.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | libreoffice |
< 1:7.3.7-0ubuntu0.22.04.13 Fix: upgrade to 1:7.3.7-0ubuntu0.22.04.13
|
| Ubuntu:24.04:LTS | canonical | libreoffice |
< 4:24.2.7-0ubuntu0.24.04.7 Fix: upgrade to 4:24.2.7-0ubuntu0.24.04.7
|
| Ubuntu:26.04:LTS | canonical | libreoffice |
< 4:26.2.6.3-0ubuntu0.26.04.2 Fix: upgrade to 4:26.2.6.3-0ubuntu0.26.04.2
|
Original advisory text
libreoffice vulnerabilities
It was discovered that LibreOffice incorrectly handled WMF image
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63272)
It was discovered that LibreOffice incorrectly handled PDF document
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63273, CVE-2026-63274)
It was discovered that LibreOffice incorrectly handled CFF fonts
embedded in documents. An attacker could possibly use this issue to
cause LibreOffice to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2026-63275, CVE-2026-63276)
It was discovered that LibreOffice incorrectly validated package URLs.
An attacker could possibly use this issue to obtain sensitive
information. (CVE-2026-63278)
It was discovered that LibreOffice incorrectly handled PICT image
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-63279)
It was discovered that LibreOffice incorrectly mitigated out-of-bounds
writes via Graphite font actions. An attacker could possibly use this
issue to cause LibreOffice to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2026-50593)
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63272)
It was discovered that LibreOffice incorrectly handled PDF document
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63273, CVE-2026-63274)
It was discovered that LibreOffice incorrectly handled CFF fonts
embedded in documents. An attacker could possibly use this issue to
cause LibreOffice to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2026-63275, CVE-2026-63276)
It was discovered that LibreOffice incorrectly validated package URLs.
An attacker could possibly use this issue to obtain sensitive
information. (CVE-2026-63278)
It was discovered that LibreOffice incorrectly handled PICT image
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-63279)
It was discovered that LibreOffice incorrectly mitigated out-of-bounds
writes via Graphite font actions. An attacker could possibly use this
issue to cause LibreOffice to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2026-50593)
References
- https://ubuntu.com/security/notices/USN-8868-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-50593 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63272 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63273 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63274 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63275 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63276 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63278 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-63279 Third Party Advisory
Timeline
Published5 Oct 2026
Updated5 Oct 2026
First seen5 Oct 2026
Sources
USN-8868-1 · OSV
Track software like this
Free during beta