CVE-2026-6045
Medium
Description
LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small buffer was allocated and then filled as if it were large, writing past its end. In fixed versions the blend-point count is checked against the data actually available before allocating.
SeverityMedium
CVSS5.4
Exploit probability—
ProductLibreOffice
PublishedJun 15, 2026
First seenJun 15, 2026
Weakness typeCWE-787Out-of-bounds writeCWE-190Integer overflow
How to fix
Update
- The Document Foundation LibreOffice< 25.8.7, < 26.2.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| The Document Foundation LibreOffice | 25.8 ≤ v < < 25.8.7, 26.2 ≤ v < < 26.2.3 | < 25.8.7, < 26.2.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.