CVE-2026-6039

A flaw was found in LibreOffice. This vulnerability, a heap buffer overflow, occurs when processing specially crafted DXF (Drawing Exchange Format) polyline files. An attacker could exploit this by convincing a user to open a malicious DXF file, which may lead to a denial of service (DoS) due to application instability and system unavailability.

This Moderate impact flaw in LibreOffice, a desktop productivity suite, is due to a heap buffer overflow when processing malformed DXF polyline files. An attacker could exploit this by tricking a user into opening a specially crafted DXF file, leading to application instability and potential denial of service. This issue primarily affects desktop environments where LibreOffice is used to open untrusted drawing files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users should exercise caution when opening DXF files from untrusted sources. Restricting the processing of untrusted or unverified DXF documents can reduce the risk of exploitation.