CVE-2026-63274

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the buffer holding it. In fixed versions the declared length is clamped to the bytes actually read.

• CWE-125
• CWE-787

• https://www.libreoffice.org/about-us/security/advisories/cve-2026-63274

Published

Sep 22, 2026

Last Modified

Sep 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63263Uncontrolled Resource Consumption (CWE-400) in Elasticsearch…6.5
• CVE-2026-63264Joomla Extension - joomshopping.com - Reflective XSS in Joom…5.3
• CVE-2026-63265Joomla Extension - regularlabs.com - Inconsistent CSRF token…8
• CVE-2026-6327IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized …4.3
• CVE-2026-63272LibreOffice can import WMF graphics, which may be embedded i…5.4
• CVE-2026-63273LibreOffice Draw can import PDF documents. A heap buffer ove…5.4
• CVE-2026-63275LibreOffice can read CFF fonts, which may be embedded in doc…5.4
• CVE-2026-63276LibreOffice converts CFF fonts to Type 1 when it subsets a f…5.4
• CVE-2026-63278URLs could be constructed which expanded environment variabl…6.7
• CVE-2026-63279LibreOffice can import PICT images, which may be embedded in…5.4
• CVE-2026-6328Improper input validation, Improper verification of cryptogr…8.3
• CVE-2026-63280Joomla Extension - regularlabs.com - Inconsistent CSRF token…8.8