PT-2026-49265

CVE-2026-6047

·

Published

2026-06-15

·

Updated

2026-11-03

Description by

CVSS 4.0
6.9
Medium
MetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)
Description A heap buffer overflow occurs during the import of documents in the OOXML (DOCX) format. The issue arises when replaying deferred parser events for a text box element, where a handler object is assumed to be of a specific type and written to according to that type's field layout. If the object is smaller than assumed, the write operation extends beyond the end of the memory allocation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ECHO-5250-FD80-297A
OPENSUSE-SU-2026:22216-1
SUSE-SU-2026:3140-1
Found an issue in the description? Have something to add? Feel free to write us 👾