CVE-2026-8357
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.
Schwachstellenklasse
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.
Quellen
- https://www.libreoffice.org/about-us/security/advisories/cve-2026-8357
- https://access.redhat.com/errata/RHSA-2026:35839
- https://access.redhat.com/errata/RHSA-2026:36832
- https://access.redhat.com/errata/RHSA-2026:43423
- https://access.redhat.com/errata/RHSA-2026:43424
- https://access.redhat.com/errata/RHSA-2026:43425
Finden Sie die Schwachstelle, bevor es ein Angreifer tut.
Melden Sie sich mit GitHub an und starten Sie Ihr erstes Audit in weniger als einer Minute. Für den kostenlosen Plan ist keine Kreditkarte nötig.