CVE-2026-8357

HIGH

The Document Foundation LibreOffice - Heap Buffer Overflow in Calc Formula Compilation

Title source: rule
STIX 2.1

Description

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.

References (13)

Core 13
Core References

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-131 CWE-193 CWE-787
Status published
Products (1)
The Document Foundation/LibreOffice 26.2 - < 26.2.4
Published Jun 15, 2026
Tracked Since Jun 15, 2026