CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.

• CWE-295
• CWE-295

• https://www.debian.org/security/2021/dsa-4988Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25634Vendor Advisory
• https://www.debian.org/security/2021/dsa-4988Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25634Vendor Advisory

Published

Oct 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25525Improper check or handling of exception conditions vulnerabi…6.5
• CVE-2021-25526Intent redirection vulnerability in Samsung Blockchain Walle…5.5
• CVE-2021-25527Improper export of Android application components vulnerabil…3.3
• CVE-2021-25630"loolforkit" is a privileged program that is supposed to be …7.8
• CVE-2021-25631In the LibreOffice 7-1 series in versions prior to 7.1.2, an…8.8
• CVE-2021-25633LibreOffice supports digital signatures of ODF documents and…7.5
• CVE-2021-25635An Improper Certificate Validation vulnerability in LibreOff…5.5
• CVE-2021-25636LibreOffice supports digital signatures of ODF documents and…7.5
• CVE-2021-25640In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parse…6.1
• CVE-2021-25641Each Apache Dubbo server will set a serialization id to tell…9.8
• CVE-2021-25642ZKConfigurationStore which is optionally used by CapacitySch…8.8
• CVE-2021-25643An issue was discovered in Couchbase Server 5.x and 6.x befo…4.9