CVE-2026-8356

Stack buffer overflow in PPT presentation import

State: Published
Severity: 5.4 Medium
Published: Jun 15, 2026
Updated: Jun 15, 2026
Reserved: May 11, 2026

Description

LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose combined colour counts exceeded the table size wrote past the end of the tables on the stack. In fixed versions the unused second pass is no longer read into those tables.

Scores

CVSS	Score	Vector	Source
4.0	5.4 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:P	Document Fdn.

Weaknesses

CWE-787 Out-of-bounds Write
CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
LibreOfficeThe Document Foundation	26.2 to before < 26.2.4Affected

References

https://www.libreoffice.org/about-us/security/advisories/cve-2026-8356

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.