CVE-2026-8358
Deferred Deferred - Pending Action
Heap Buffer Overflow in LibreOffice Calc

Publication date: 2026-06-15

Last updated on: 2026-06-15

Assigner: Document Foundation, The

Description
LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-15
Last Modified
2026-06-15
Generated
2026-06-16
AI Q&A
2026-06-15
EPSS Evaluated
N/A
NVD
CVE-2026-8358
EUVD
EUVD-2026-36740
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
the_document_foundation libreoffice *-*
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-843 The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in LibreOffice Calc's ability to import tracked changes from a spreadsheet document. Specifically, a heap buffer overflow occurs when a document reuses the same change identifier for two different kinds of changes. The importer mistakenly treats one change object as a different, larger type and writes beyond the allocated memory buffer. This issue has been fixed by rejecting records with duplicate identifiers.

Impact Analysis

The heap buffer overflow vulnerability can lead to memory corruption, which may cause the application to crash or behave unpredictably. In some cases, this could be exploited by an attacker to execute arbitrary code or escalate privileges, potentially compromising the security of the system running LibreOffice Calc.

Mitigation Strategies

To mitigate this vulnerability, you should update LibreOffice to a fixed version where records with duplicate change identifiers are rejected, preventing the heap buffer overflow.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-8358. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart