CVE-2026-63273 | BDVDB-2026-377669 Detail

Description#

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-22Record published in the CVE List.
2. Version 22026-09-28Most recent update recorded in the CVE List.