VULNERABILITY INTELLIGENCE
CVE-2026-8358
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-15
Last modified2026-10-25
Description
LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.
Weakness classification
- security@documentfoundation.org: CWE-787