Critical Security Flaw in LibreOffice: Heap and Stack Buffer Overflows
Summary
RLSA-2026:82013: Important: libreoffice security update. Affects libreoffice versions < 1:7.1.8.1-15.el9_8.3. Fixed in 1:7.1.8.1-15.el9_8.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
LibreOffice is a widely-used open-source office productivity suite that includes applications for word processing, spreadsheets, presentations, formula editing, and drawing. It serves as a replacement for OpenOffice, offering enhanced features and improved functionality. However, recent vulnerabilities have exposed LibreOffice to significant security risks, particularly in its handling of PDF imports and font conversions.
Vulnerability Detail
The vulnerabilities in LibreOffice stem from multiple buffer overflow issues. Specifically, there is a heap buffer overflow in the PDF import stream handling (CVE-2026-63274) and stack buffer overflows in the CFF to Type 1 font conversion (CVE-2026-63276) and CFF font hint handling (CVE-2026-63275). Additionally, there is a critical vulnerability that allows arbitrary code execution via a remote Java database driver (CVE-2026-63277). These vulnerabilities can lead to severe consequences, including unauthorized access to system resources and potential data breaches.
How To Fix
Minimum fixed version
1:7.1.8.1-15.el9_8.3
This is the first release that contains the fix.
sudo dnf update libreofficeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the use of remote Java database drivers in LibreOffice settings to mitigate the risk of arbitrary code execution until the software is updated.
Conclusion
The recent vulnerabilities in LibreOffice pose significant security risks that can lead to unauthorized access and data breaches. It is crucial for users to update to the latest patched version to mitigate these risks effectively. Additionally, utilizing tools like Vulert can help in monitoring and managing open-source vulnerabilities.
See every vulnerability recorded for libreoffice →
FAQ
The main vulnerabilities include heap and stack buffer overflows, as well as an arbitrary code execution risk via remote Java database drivers.
You can check your version of LibreOffice by navigating to 'Help' > 'About LibreOffice' in the application. Compare it with the patched version 1:7.1.8.1-15.el9_8.3.
The CVSS score for these vulnerabilities is 7.8, indicating a high severity level.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json.
For more details, refer to the CVE pages associated with each vulnerability: CVE-2026-63274, CVE-2026-63275, CVE-2026-63276, and CVE-2026-63277.
References
Related vulnerabilities
Recent vulnerabilities recorded for libreoffice.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
