CVE-2026-8357
libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 16, 2026
Updated · July 28, 2026
Description
A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. Successful exploitation of this vulnerability could result in a denial of service or potentially lead to arbitrary code execution.
Statement
A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. In severe cases, this could allow an attacker to run unauthorized, malicious code on the user's computer. Users should avoid opening untrusted spreadsheets
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Users should exercise caution when opening untrusted or suspicious spreadsheet documents.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-131 · Incorrect Calculation of Buffer Size