VULNERABILITY INTELLIGENCE

CVE-2026-63275

EPSS probability0.19%
CISA KEVNot currently listed
Published2026-09-22
Last modified2026-09-22

Description

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

Weakness classification

  • security@documentfoundation.org: CWE-787

Primary references