CVE-2026-8358 — Heap buffer overflow in spreadsheet tracked-changes import
LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds…
Published: 2026-06-15 · CVSS: 5.4 · CVSS 4.0
LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7