CVE-2026-6047

A flaw was found in LibreOffice. This vulnerability, a heap buffer overflow, occurs when processing specially crafted OOXML (Office Open XML) documents. An attacker could create a malicious document that, when opened, causes a write beyond the intended memory boundary during the replaying of deferred parser events for text box elements. This could lead to a denial of service, making the application unavailable.

This Moderate impact flaw in LibreOffice stems from a heap buffer overflow when handling specially crafted OOXML documents. Successful exploitation requires user interaction, where a victim must open a malicious document, resulting in a denial of service. This issue primarily affects application availability and does not facilitate arbitrary code execution or data exfiltration.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should exercise caution when opening untrusted or suspicious OOXML documents. Avoiding the opening of such documents from unknown sources can prevent the exploitation of this vulnerability. If possible, process untrusted documents in a sandboxed environment.