CVE-2026-63274

Name of the Vulnerable Software and Affected Versions LibreOffice Draw (affected versions not specified)

Description An issue exists when importing PDF documents where a heap buffer overflow occurs during the processing of a stream object. The software uses the stream length specified in the object's own dictionary without verifying it against the actual number of bytes present. This leads to a condition where copying the stream reads and writes data beyond the allocated buffer boundary. A heap buffer overflow is a memory corruption error that occurs when a program writes more data to a heap-allocated buffer than it can hold.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.