← CVE Intelligence

CVE-2025-2866

PDF signature forgery with adbe.pkcs7.sha1 SubFilter PUBLISHED

Description (CNA)

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.

Affected (CNA)

Vendor / productVersions
The Document Foundation / LibreOfficeaffected 24.8 before < 24.8.6; affected 25.2 before < 25.2.2

CWE

CWE-347

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.