CVE-2026-63272
Last modified
CVE-2026-63272 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths.
Description
LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. The count of advance values and the length of the text were read separately from the file and were not required to agree, so drawing the text walked the advance array by character position and ran past its end when the array was the shorter of the two. In fixed versions an advance array shorter than its text is ignored.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| The Document Foundation | LibreOffice | >= 26.2, < < 26.2.5 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-63272?
How severe is CVE-2026-63272?
How do I fix CVE-2026-63272?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-63261Uncontrolled Resource Consumption (CWE-400) in Kibana can le…6.5
- CVE-2026-63262Missing Authorization (CWE-862) in Kibana can lead to unauth…4.3
- CVE-2026-63263Uncontrolled Resource Consumption (CWE-400) in Elasticsearch…6.5
- CVE-2026-63264Joomla Extension - joomshopping.com - Reflective XSS in Joom…5.3
- CVE-2026-63265Joomla Extension - regularlabs.com - Inconsistent CSRF token…8
- CVE-2026-6327IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized …4.3
- CVE-2026-63273LibreOffice Draw can import PDF documents. A heap buffer ove…5.4
- CVE-2026-63274LibreOffice Draw can import PDF documents. A heap buffer ove…5.4
- CVE-2026-63275LibreOffice can read CFF fonts, which may be embedded in doc…5.4
- CVE-2026-63276LibreOffice converts CFF fonts to Type 1 when it subsets a f…5.4
- CVE-2026-63278URLs could be constructed which expanded environment variabl…6.7
- CVE-2026-63279LibreOffice can import PICT images, which may be embedded in…5.4
Are you affected by CVE-2026-63272?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST