32105 matches found
CVE-2026-63274 Heap buffer overflow in PDF import stream handling
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the...
CVE-2026-63274
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the...
CVE-2026-63274
LibreOffice Draw is affected by a heap buffer overflow in its PDF import stream handling . When importing a stream object, the declared length from the object's dictionary was not validated against the number of bytes actually present, causing the copy operation to read and write past the end of ...
EUVD-2026-84354
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the...
CVE-2026-63274 Heap buffer overflow in PDF import stream handling
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the...
CVE-2026-63273
LibreOffice Draw is vulnerable to a heap buffer overflow when importing encrypted PDF documents. The root cause lies in the PDF import's encryption handling: the decryption key length was read directly from the document's own encryption dictionary and used to fill a fixed-size key buffer without ...
CVE-2026-63273
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length large...
CVE-2026-63273 Heap buffer overflow in PDF import encryption handling
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length large...
EUVD-2026-84353
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length large...
CVE-2026-63273 Heap buffer overflow in PDF import encryption handling
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length large...
CVE-2026-63274: Out-of-bounds Write
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the...
CVE-2026-63273: Out-of-bounds Write
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length large...
CVE-2026-63276: Out-of-bounds Write
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-reportlab (UTSA-2023-002178)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002178 advisory. Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. Tenable has extracted the preceding description block directly...
PT-2026-96703
Name of the Vulnerable Software and Affected Versions LibreOffice Draw affected versions not specified Description An issue exists when importing PDF documents where a heap buffer overflow occurs during the processing of a stream object. The software uses the stream length specified in the object...
PT-2026-96702
Name of the Vulnerable Software and Affected Versions LibreOffice Draw affected versions not specified Description A heap buffer overflow occurs during the import of encrypted PDF documents. The issue arises because the software uses the decryption key length specified in the document's encryptio...
PT-2026-96706
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...
PT-2026-96705
Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description A stack buffer overflow occurs during the conversion of CFF fonts to Type 1 fonts, a process that takes place when a document is exported to PDF and CFF fonts are embedded. The issue aris...
Linux Distros Unpatched Vulnerability : CVE-2026-54633
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap...
