Heap Buffer Overflow in LibreOffice Related to EMF+ Graphics

CVE-2026-6045

What is CVE-2026-6045?

LibreOffice has a vulnerability that occurs during the import of EMF+ graphics, specifically related to gradient brushes. When a document contains an EMF+ graphic, the application reads the number of gradient blend points to calculate the necessary memory allocation. However, if an overflow happens during this computation, it may result in a small buffer being allocated. Consequently, when data is written to this buffer, it exceeds its limits, leading to a heap buffer overflow. In response, updated versions of LibreOffice implement checks to ensure that the blend-point count aligns with the available data before proceeding with memory allocation, thereby mitigating the risk of such vulnerabilities.

References