CVE-2026-4430

A flaw was found in LibreOffice. A remote attacker could exploit this out-of-bounds write vulnerability by tricking a user into opening a specially crafted OOXML (Office Open XML) document with mismatched encryption salt parameters. This could lead to a denial of service (DoS), making the application unavailable, and potentially result in limited information disclosure or integrity impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users are advised to avoid opening untrusted or suspicious OOXML documents. This operational control reduces the risk of exploitation by preventing the vulnerable LibreOffice component from processing malicious input.