PT-2026-96707

CVE-2026-63279

·

Published

2026-09-22

·

Updated

2026-10-17

Description by

CVSS 4.0
6.9
Medium
MetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)
Description An out of bounds read occurs during the import of PICT images, which can be embedded in documents. The issue arises when importing an image that utilizes a colour palette, as the palette index within the image data is used without being verified against the total number of palette entries. This allows an index exceeding the last entry to read memory outside the allocated palette.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ECHO-088C-1462-CA4C
MGASA-2026-0514
USN-8868-1
Found an issue in the description? Have something to add? Feel free to write us 👾