Description (CNA)
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed versions the position is bounds-checked before use.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Document Foundation / LibreOffice | affected 25.8 before < 25.8.7; affected 26.2 before < 26.2.3 |
CWE
CWE-416, CWE-787
References
ADP enrichment
No English description supplied.
No references supplied.
A vulnerability was found in LibreOffice. If a user inadvertently opens a malicious OpenDocument Format (ODF) file, an attacker could execute unauthorized code and potentially gain full control of the system.