CVE-2026-63274
Received Received - Intake

Heap Buffer Overflow in LibreOffice Draw PDF Import

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: Document Foundation, The

Description
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the buffer holding it. In fixed versions the declared length is clamped to the bytes actually read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-63274
EUVD
EUVD-2026-84354

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
the_document_foundation libreoffice_draw *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

LibreOffice Draw has a vulnerability where importing PDF documents can cause a heap buffer overflow. This happens because the length of a stream object is taken from the object's dictionary without checking if it matches the actual number of bytes present. This leads to reading and writing past the buffer's end.

Detection Guidance

This vulnerability involves a heap buffer overflow in LibreOffice Draw when importing PDFs. Detection requires checking if vulnerable versions of LibreOffice Draw are installed. Use commands like 'apt list --installed | grep libreoffice' (Debian/Ubuntu) or 'rpm -qa | grep libreoffice' (RHEL/Fedora) to verify installed versions.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by tricking a user into opening a specially crafted PDF file in LibreOffice Draw. It may lead to crashes or system compromise if exploited.

Compliance Impact

This vulnerability involves a heap buffer overflow in LibreOffice Draw when importing PDFs, which could lead to arbitrary code execution or denial of service. Such vulnerabilities may impact compliance by exposing sensitive data processed by LibreOffice, potentially violating GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information. However, specific compliance impacts depend on deployment context and mitigations.

Mitigation Strategies

Update LibreOffice to the latest fixed version immediately. Disable PDF import in LibreOffice Draw if not required. Monitor for unusual crashes or memory corruption when handling PDF files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63274. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart