CVE-2026-63273

Name of the Vulnerable Software and Affected Versions LibreOffice Draw (affected versions not specified)

Description A heap buffer overflow occurs during the import of encrypted PDF documents. The issue arises because the software uses the decryption key length specified in the document's encryption dictionary to fill a fixed-size key buffer without verifying if the length exceeds the buffer's capacity. This allows data to be written beyond the buffer's boundary. A heap buffer overflow is a memory corruption issue where a program writes more data to a heap-allocated memory block than it can hold.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.