The Document Foundation LibreOffice.

Heap buffer overflow in dBASE index import

• The Document Foundation LibreOffice
• Denial of service
• Memory corruption

Environment/ini-file leaks

• The Document Foundation LibreOffice
• Information disclosure

LFI and GET SSRF via GStreamer and HLS playlists

• The Document Foundation LibreOffice
• Information disclosure
• Server-side request forgery (SSRF)

LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

• The Document Foundation LibreOffice
• Information disclosure

LFI and GET SSRF via calcext:data-mappings and csv provider

• The Document Foundation LibreOffice
• Information disclosure
• Server-side request forgery (SSRF)

Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

• The Document Foundation LibreOffice
• Path traversal

RCE via calcext:data-mappings, sql provider and jdbc connector

• The Document Foundation LibreOffice
• CWE-829

Out of bounds read in PICT image import

• The Document Foundation LibreOffice
• Memory corruption

Package URLs can be used to exfiltrate arbitrary INI file values and environment variables

• The Document Foundation LibreOffice
• Information disclosure

Stack buffer overflow in CFF to Type 1 font conversion

• The Document Foundation LibreOffice
• Memory corruption

Stack buffer overflow in CFF font hint handling

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in PDF import stream handling

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in PDF import encryption handling

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in WMF text record import

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in spreadsheet tracked-changes import

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in Calc formula compilation

• The Document Foundation LibreOffice
• Memory corruption
• CWE-193

Stack buffer overflow in PPT presentation import

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in OOXML text box element import

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in EMF+ gradient brush import

• The Document Foundation LibreOffice
• Memory corruption

Heap use-after-free in ODF number-format blank-width parsing

• The Document Foundation LibreOffice
• Memory corruption

Heap buffer overflow in DXF polyline import

• The Document Foundation LibreOffice
• Memory corruption
• CWE-197

Heap Buffer Overflow in AgileEngine

• The Document Foundation LibreOffice
• Memory corruption

TCC Bypass via Inherited Permissions in Bundled Interpreter

• The Document Foundation LibreOffice
• Authentication bypass

PDF signature forgery with adbe.pkcs7.sha1 SubFilter

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Content Manipulation with Certificate Validation Attack

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Macro URL arbitrary script execution

• The Document Foundation LibreOffice
• CWE-20

Executable hyperlink Windows path targets executed unconditionally on activation

• The Document Foundation LibreOffice
• CWE-20

URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

• The Document Foundation LibreOffice
• Information disclosure

Path traversal leading to arbitrary .ttf file write

• The Document Foundation LibreOffice
• Path traversal

Signatures in "repair mode" should not be trusted

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Ability to trust not validated macro signatures removed in high security mode

• The Document Foundation LibreOffice
• Weak cryptography or TLS

TLS certificate are not properly verified when utilizing LibreOfficeKit

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Graphic on-click binding allows unchecked script execution

• The Document Foundation LibreOffice
• Code injection
• CWE-356

Link targets allow arbitrary script execution

• The Document Foundation LibreOffice

Improper input validation enabling arbitrary Gstreamer pipeline injection

• The Document Foundation LibreOffice

Remote documents loaded without prompt via IFrame

• The Document Foundation LibreOffice
• CWE-264

Array Index UnderFlow in Calc Formula Parsing

• The Document Foundation LibreOffice
• CWE-129

Macro URL arbitrary script execution

• The Document Foundation LibreOffice
• CWE-20

Weak Master Keys

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Execution of Untrusted Macros Due to Improper Certificate Validation

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Execution of Untrusted Macros Due to Improper Certificate Validation

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Incorrect trust validation of signature with ambiguous KeyInfo children

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Timestamp Manipulation with Signature Wrapping

• The Document Foundation LibreOffice
• Weak cryptography or TLS

Content Manipulation with Double Certificate Attack

• The Document Foundation LibreOffice
• Weak cryptography or TLS

denylist of executable filename extensions possible to bypass under windows

• The Document Foundation LibreOffice
• CWE-184

XForms submissions could overwrite local files

• The Document Foundation LibreOffice

remote graphics contained in docx format retrieved in 'stealth mode'

• The Document Foundation LibreOffice
• Information disclosure

Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save

• The Document Foundation LibreOffice
• Weak cryptography or TLS