Heap Use-After-Free Vulnerability in LibreOffice ODF Number Format

CVE-2026-6040

What is CVE-2026-6040?

This vulnerability arises from a heap use-after-free situation that occurs during the importation of blank-width characters from an ODF number format. The flaw lies in the improper bounds-checking of a position value read from the document, allowing a malformed number format to process memory segments beyond the intended format-code string. This situation can lead to memory corruption, potentially resulting in adverse effects on the system's stability and security. Revised versions have implemented necessary position checks to prevent this issue.

References