ECHO-5250-FD80-297A Heap buffer overflow when replaying deferred OOXML parser events for a text box element, fixed upstream in LibreOffice 25.8.7 and 26.2.3. Debian trixie ships LibreOffice 25.2.3, which does not contain the vulnerable code: the Debian security team marks trixie (and bookworm) as not-affected ("Vulnerable code not present"). No Echo patch is required. Re-evaluate if this spec is ever rebased to a newer LibreOffice release that predates the upstream fix. https://security-tracker.debian.org/tracker/CVE-2026-6047
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | ANT-2026-0HC68EK6 · LibreOffice · Heap Buffer Overflow | 17 Aug 202617:47 | – | anthropic |
 | The vulnerability of the LibreOffice office software package, related to overflowing buffer spaces in dynamic memory, allows a hacker to trigger a service failure. | 9 Jul 202600:00 | – | bdu_fstec |
 | CVE-2026-6047 | 15 Jun 202616:22 | – | cve |
 | CVE-2026-6047 Heap buffer overflow in OOXML text box element import | 15 Jun 202616:22 | – | cvelist |
 | CVE-2026-6047 | 15 Jun 202616:22 | – | debiancve |
 | EUVD-2026-36737 | 15 Jun 202616:22 | – | euvd |
 | CVE-2026-6047 | 15 Jun 202618:16 | – | nvd |
 | DEBIAN-CVE-2026-6047 | 15 Jun 202618:16 | – | osv |
| SUSE-SU-2026:3140-1 Security update for libreoffice | 20 Jul 202618:01 | – | osv |
| UBUNTU-CVE-2026-6047 | 15 Jun 202618:16 | – | osv |
10
| Source | Link |
|---|---|
| advisory | www.advisory.echohq.com/cve/CVE-2026-6047 |
| cve | www.cve.org/CVERecord |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
29 Sep 2026 11:45Current
5.8Medium risk
Vulners AI Score5.8
CVSS 46.9
EPSS0.00167
SSVC