Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fh9h-5g6m-wc43

Опубликовано: 22 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.4

Описание

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

EPSS

Процентиль: 8%
0.00187
Низкий

5.4 Medium

CVSS4

Дефекты

CWE-787

Связанные уязвимости

ubuntu
около 1 месяца назад

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

CVSS3: 7.3
redhat
около 1 месяца назад

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

nvd
около 1 месяца назад

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

debian
около 1 месяца назад

LibreOffice can read CFF fonts, which may be embedded in documents. A ...

rocky
4 дня назад

Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

EPSS

Процентиль: 8%
0.00187
Низкий

5.4 Medium

CVSS4

Дефекты

CWE-787