CVE-2026-63279 — Out of bounds read in PICT image import

CVE-2026-63279

Out of bounds read in PICT image import PUBLISHED

Description (CNA)

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the last entry read memory outside the palette. In fixed versions the palette index is limited to the entries present.

Affected (CNA)

Vendor / product	Versions
The Document Foundation / LibreOffice	affected 26.2 before < 26.2.5

CWE

CWE-125

References

https://www.libreoffice.org/about-us/security/advisories/cve-2026-63279

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.