Lucene search

K
redhatcveRedhat.comRH:CVE-2023-0950
HistoryMay 26, 2023 - 8:40 p.m.

CVE-2023-0950

2023-05-2620:40:43
redhat.com
access.redhat.com
10
libreoffice
vulnerability
spreadsheet
array index underflow
document foundation
aggregate
arbitrary code

0.001 Low

EPSS

Percentile

19.3%

A vulnerability was found in LibreOffice. Improper validation of the array index in the spreadsheet component of The Document Foundation in LibreOffice allows an attacker to craft a spreadsheet document that causes an array index underflow when loaded. In affected versions of LibreOffice, certain malformed spreadsheet formulas, such as AGGREGATE, could be created with fewer parameters passed to the formula interpreter than expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed.