Moderate Vulnerability in LibreOffice: Denial of Service via Crafted OOXML Documents
Summary
RLSA-2026:28290: Moderate: libreoffice security update. Affects libreoffice versions < 1:7.1.8.1-15.el9_8.1. Fixed in 1:7.1.8.1-15.el9_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreOffice is an open-source, community-developed office productivity suite that includes essential desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. It serves as a replacement for OpenOffice, offering enhanced features and extended capabilities. However, like any software, it is susceptible to vulnerabilities that can compromise its functionality and user experience.
Vulnerability Detail
The vulnerability identified as CVE-2026-4430 allows for a Denial of Service (DoS) attack through specially crafted OOXML documents. Attackers can exploit this vulnerability to crash the LibreOffice application, leading to potential data loss and disruption of services. The issue arises from improper handling of specific document formats, which can overwhelm the application and render it unresponsive.
How To Fix
Minimum fixed version
1:7.1.8.1-15.el9_8.1
This is the first release that contains the fix.
sudo dnf update libreofficeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid opening untrusted OOXML documents until the update has been applied. This will help mitigate the risk of encountering the vulnerability while waiting for the official patch.
Conclusion
In summary, the vulnerability CVE-2026-4430 in LibreOffice poses a risk of Denial of Service through crafted OOXML documents. Users are advised to update to the latest version to mitigate this risk and ensure the continued functionality of their office productivity suite.
See every vulnerability recorded for libreoffice →
FAQ
CVE-2026-4430 is a vulnerability in LibreOffice that allows for a Denial of Service attack via crafted OOXML documents.
You can check if your version is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities without requiring installation.
The vulnerability can lead to application crashes, data loss, and disruption of services, affecting user productivity.
The best prevention is to update LibreOffice to the latest patched version and avoid opening untrusted OOXML documents.
The CVSS score for this vulnerability is 7.6, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for libreoffice.
