PT-2026-96707 · Document Foundation · Libreoffice

·

CVE-2026-63279

·

Published

2026-09-22

·

Updated

2026-09-22

CVSS v4.0

6.9

Medium

VectorAV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)
Description An out of bounds read occurs during the import of PICT images, which can be embedded in documents. The issue arises when importing an image that utilizes a colour palette, as the palette index within the image data is used without being verified against the total number of palette entries. This allows an index exceeding the last entry to read memory outside the allocated palette.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-63279
ECHO-088C-1462-CA4C

Affected Products

Libreoffice