CVE-2026-63279
Out of bounds read in PICT image import
- State
- Published
- Severity
- 5.4 Medium
- Published
- Sep 22, 2026
- Updated
- Sep 22, 2026
- Reserved
- Jul 16, 2026
Description
LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the last entry read memory outside the palette. In fixed versions the palette index is limited to the entries present.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.4 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:P | Document Fdn. |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
LibreOfficeThe Document Foundation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.