Heap Buffer Overflow Vulnerability in LibreOffice Calc by The Document Foundation

CVE-2026-8358

What is CVE-2026-8358?

A vulnerability has been discovered in LibreOffice Calc that may lead to a heap buffer overflow when importing tracked changes from spreadsheet documents. This issue arises when a document reuses the same change identifier for different types of changes, causing the importer to incorrectly handle the change object as a larger type. This misinterpretation can lead to writing data beyond the allocated memory, potentially exposing the application to exploitation. The fixed versions now reject records with duplicate identifiers, enhancing the security of document handling.

References