Improper Certificate Validation in LibreOffice Products

CVE-2021-25635

What is CVE-2021-25635?

An improper certificate validation issue exists in LibreOffice, where an attacker can exploit this vulnerability by crafting a self-signed ODF document. This manipulated document uses a signature algorithm that is either invalid or unknown to LibreOffice, leading the software to incorrectly present such a signature as valid. This flaw can mislead users into trusting unverified documents, posing a significant security risk.

References