CVE-2026-63274 — Heap buffer overflow in PDF import stream handling

CVE-2026-63274

Heap buffer overflow in PDF import stream handling PUBLISHED

Description (CNA)

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the buffer holding it. In fixed versions the declared length is clamped to the bytes actually read.

Affected (CNA)

Vendor / product	Versions
The Document Foundation / LibreOffice	affected 26.2 before < 26.2.5

CWE

CWE-787, CWE-125

References

https://www.libreoffice.org/about-us/security/advisories/cve-2026-63274

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.