← CVE Intelligence

CVE-2026-8357

Heap buffer overflow in Calc formula compilation PUBLISHED

Description (CNA)

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.

Affected (CNA)

Vendor / productVersions
The Document Foundation / LibreOfficeaffected 26.2 before < 26.2.4

CWE

CWE-787, CWE-193

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. Successful exploitation of this vulnerability could result in a denial of service or potentially lead to arbitrary code execution.