CVE-2025-2866
LibreOffice: PDF signature forgery with adbe.pkcs7.sha1 SubFilter
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 28, 2025
Updated · June 30, 2026
Description
A flaw was found in LibreOffice related to cryptographic signature verification in PDFs. This vulnerability allows attackers to spoof digital signatures, possibly leading to misleading or falsified documents and potentially affecting trust in digitally signed PDFs.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Users should apply security updates to mitigate the risk.
CVSS / CWE
CVSS 3.1 · 2.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CWE-347 · Improper Verification of Cryptographic Signature