CVE-2026-6045 The Document Foundation CVE debrief

Who should care

LibreOffice users and administrators should assess exposure and prioritize verifying and updating to fixed versions to prevent potential exploitation. This includes reviewing and monitoring EMF+ graphics imports for potential exploitation and implementing compensating controls to detect and prevent exploitation.

Why it matters

The CVE-2026-6045 heap buffer overflow vulnerability in LibreOffice EMF+ graphics import requires verification and updating to fixed versions to prevent potential exploitation.

• Verify and update LibreOffice to a fixed version to prevent potential exploitation
• Review and monitor EMF+ graphics imports for potential exploitation
• Implement compensating controls to detect and prevent exploitation

Technical summary

The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small buffer was allocated and then filled as if it were large, writing past its end. In fixed versions the blend-point count is checked against the data actually available before allocating. This vulnerability affects LibreOffice users and administrators who should assess exposure and prioritize verifying and updating to fixed versions to prevent potential exploitation. The vulnerability is related to importing EMF+ graphics.

Defensive priority

LibreOffice users and administrators should prioritize verifying and updating to fixed versions to prevent potential exploitation.

Recommended defensive actions

• Verify and update LibreOffice to a fixed version
• Review and monitor EMF+ graphics imports for potential exploitation
• Implement compensating controls to detect and prevent exploitation
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the heap buffer overflow vulnerability in LibreOffice when importing EMF+ graphics. The vulnerability requires verification and updating to fixed versions to prevent potential exploitation. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow. The CVE Program record and NVD detail page offer source-provided CVE metadata and source-specific vulnerability assessment.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.