CVE-2026-6039

🗓️ 15 Jun 2026 16:21:16Reported by Document Fdn.Type

LibreOffice DXF polyline import has a heap buffer overflow when point count exceeds 16-bit range.

Reporter	Title	Published	Views	Family All 28
BDU FSTEC	The vulnerability of the LibreOffice office software package, related to overflowing buffer spaces in dynamic memory, allows a hacker to trigger a service failure.	9 Jul 202600:00	–	bdu_fstec
Cvelist	CVE-2026-6039 Heap buffer overflow in DXF polyline import	15 Jun 202616:21	–	cvelist
Debian	[SECURITY] [DLA 4633-1] libreoffice security update	17 Jun 202612:20	–	debian
Debian	[SECURITY] [DSA 6346-1] libreoffice security update	15 Jun 202620:28	–	debian
Debian CVE	CVE-2026-6039	15 Jun 202616:21	–	debiancve
Tenable Nessus	Debian dla-4633 : fonts-opensymbol - security update	18 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6346 : fonts-opensymbol - security update	15 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLED15: libreoffice / libreoffice-base / libreoffice-base-drivers-firebird / etc (SUSE-SU-2026:3140-1)	22 Jul 202600:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : LibreOffice vulnerabilities (USN-8534-1)	14 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-6039	15 Jun 202600:00	–	nessus

[
  {
    "vendor": "The Document Foundation",
    "product": "LibreOffice",
    "versions": [
      {
        "status": "affected",
        "version": "25.8",
        "lessThan": "< 25.8.7",
        "versionType": "25.8 series"
      },
      {
        "status": "affected",
        "version": "26.2",
        "lessThan": "< 26.2.3",
        "versionType": "26.2 series"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
libreoffice	www.libreoffice.org/about-us/security/advisories/cve-2026-6039

17 Jun 2026 11:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 46.9

EPSS0.00157

SSVC