CVE-2021-25832

A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer.

• CWE-787

• https://github.com/ONLYOFFICE/DocumentServerProduct
• https://github.com/ONLYOFFICE/coreProduct, Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L424Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L428Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L354Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L358Vendor Advisory
• https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25832Exploit, Third Party Advisory
• https://github.com/ONLYOFFICE/DocumentServerProduct
• https://github.com/ONLYOFFICE/coreProduct, Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L424Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L428Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L354Vendor Advisory
• https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L358Vendor Advisory
• https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25832Exploit, Third Party Advisory

Published

Mar 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25812Command injection vulnerability in China Mobile An Lianbao W…9.8
• CVE-2021-25827Emby Server < 4.7.12.0 is vulnerable to a login bypass attac…9.8
• CVE-2021-25828Emby Server versions < 4.6.0.50 is vulnerable to Cross Site …6.1
• CVE-2021-25829An improper binary stream data handling issue was found in t…7.5
• CVE-2021-25830A file extension handling issue was found in [core] module o…9.8
• CVE-2021-25831A file extension handling issue was found in [core] module o…9.8
• CVE-2021-25833A file extension handling issue was found in [server] module…9.8
• CVE-2021-25834Cosmos Network Ethermint <= v0.4.0 is affected by a transact…7.5
• CVE-2021-25835Cosmos Network Ethermint <= v0.4.0 is affected by a cross-ch…7.5
• CVE-2021-25836Cosmos Network Ethermint <= v0.4.0 is affected by cache life…7.5
• CVE-2021-25837Cosmos Network Ethermint <= v0.4.0 is affected by cache life…7.5
• CVE-2021-25838The Import function in MintHCM RELEASE 3.0.8 allows an attac…6.1