CVE-2026-8358 — Heap buffer overflow in spreadsheet tracked-changes import

CVE-2026-8358

Heap buffer overflow in spreadsheet tracked-changes import PUBLISHED

Description (CNA)

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

Affected (CNA)

Vendor / product	Versions
The Document Foundation / LibreOffice	affected 25.8 before < 25.8.7; affected 26.2 before < 26.2.4

CWE

CWE-843, CWE-787

References

https://www.libreoffice.org/about-us/security/advisories/cve-2026-8358

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.