VULNERABILITY INTELLIGENCE

CVE-2024-12425

CVSS score3.3 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-01-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.

Weakness classification

  • security@documentfoundation.org: CWE-22

Primary references