Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gpc5-jgqj-xp2q

Опубликовано: 15 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.4

Описание

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

EPSS

Процентиль: 7%
0.00171
Низкий

5.4 Medium

CVSS4

Дефекты

CWE-787

Связанные уязвимости

ubuntu
около 2 месяцев назад

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

CVSS3: 6.6
redhat
около 2 месяцев назад

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

nvd
около 2 месяцев назад

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

debian
около 2 месяцев назад

LibreOffice Calc can import tracked changes from a spreadsheet documen ...

CVSS3: 6.6
fstec
около 2 месяцев назад

Уязвимость пакета офисных программ LibreOffice, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 7%
0.00171
Низкий

5.4 Medium

CVSS4

Дефекты

CWE-787