CVE Database›Document archive›CVE-2026-8357

CVE-2026-8357

libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · June 16, 2026

Updated · July 28, 2026

Description

A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. Successful exploitation of this vulnerability could result in a denial of service or potentially lead to arbitrary code execution.

Statement

A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. In severe cases, this could allow an attacker to run unauthorized, malicious code on the user's computer. Users should avoid opening untrusted spreadsheets

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Users should exercise caution when opening untrusted or suspicious spreadsheet documents.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-131 · Incorrect Calculation of Buffer Size