CVE-2026-63272

A flaw was found in LibreOffice. When processing embedded Windows Metafile (WMF) graphics, a heap buffer overflow can occur during the import of text records. This vulnerability arises because the application reads the character advance values and text length independently, which can lead to a mismatch and out-of-bounds memory access. A remote attacker could exploit this flaw by crafting a malicious WMF file, potentially leading to a denial of service or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.