LibreOffice < 26.2.6 / 26.8.x < 26.8.1 Heap Buffer Overflow

The version of LibreOffice installed on the remote host is prior to 26.2.6, or 26.8.x prior to 26.8.1. It is, therefore, affected by a heap buffer overflow vulnerability: - LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE fil...

SUSE CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

CVE-2026-76181

A flaw was found in LibreOffice. The application's dBASE database driver fails to validate entry counts against page capacity and does not prevent circular page references when parsing index .ndx files. By convincing a user to open a data source with a specially crafted dBASE index file, an...

CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

UBUNTU-CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

Linux Distros Unpatched Vulnerability : CVE-2026-76181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap...

CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

DEBIAN-CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

EUVD-2026-117767

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

CVE-2026-76181 Heap buffer overflow in dBASE index import

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

CVE-2026-76181

The LibreOffice dBASE database driver is vulnerable to a heap buffer overflow and uncontrolled recursion when processing dBASE tables and .ndx index files used as a data source. The flaw occurs because the driver fails to validate the number of entries recorded in an index page against the page's...

PT-2026-137720

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description A heap buffer overflow occurs when the dBASE database driver reads index files .ndx used as a data source. The issue arises because the number of entries recorded in a page is not validat...

Linux Distros Unpatched Vulnerability : CVE-2016-6633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain PHP installations that are running with...

CVE-2021-35297

Scalabium dBase Viewer version 2.6 Build 5.751 is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An attacker can use the Structured Exception Handler SEH records and redirect execution to attacker-controlled code...

SUSE CVE-2016-6633

An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain PHP installations that are running with the dbase extension. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

MAL-2022-2559 Malicious code in dolphin-dbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd9702f3fa3f82c265a1cb8d73de3f9f7446372aac73b4ce46efeaa5802cd1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dolphin-dbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd9702f3fa3f82c265a1cb8d73de3f9f7446372aac73b4ce46efeaa5802cd1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dolphin-dbase

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

phpMyAdmin Denial of service (DOS) attack with dbase extension

An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...