Heap Buffer Overflow Vulnerability in LibreOffice OOXML Document Handling

CVE-2026-6047

What is CVE-2026-6047?

A vulnerability in LibreOffice allows for a heap buffer overflow during the import of OOXML documents (DOCX format). This issue occurs when deferred parser events related to a text box element are replayed. The vulnerability arises from an assumption made about the handler object type, leading it to be treated as a larger object than it actually is. Consequently, writing to its fields risks overwriting memory beyond the allocated space. The fixed versions implement a type check to prevent this misinterpretation and ensure safe writing operations.

References