https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:59:25 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-63273 <p>LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document&#39;s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.</p> <p>LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document&#39;s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-63273 https://vulnerability.circl.lu/vuln/ghsa-254q-47m3-r67w <p>LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document&#39;s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.</p> <p>LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document&#39;s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.</p> https://vulnerability.circl.lu/vuln/ghsa-254q-47m3-r67w https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-63273 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libreoffice, Ubuntu:22.04:LTS: libreoffice, Ubuntu:24.04:LTS: libreoffice, Ubuntu:26.04:LTS: libreoffice</p> <p>LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document&#39;s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libreoffice, Ubuntu:22.04:LTS: libreoffice, Ubuntu:24.04:LTS: libreoffice, Ubuntu:26.04:LTS: libreoffice</p> <p>LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document&#39;s own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-63273