MEDIUM 5.4 NVD

CVE-2026-63275

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was c

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint count is checked against the capacity the array really has.

References

https://www.libreoffice.org/about-us/security/advisories/cve-2026-63275

Published: 2026-09-22 · Source: NVD · Feed updated: 2026-09-22

This medium severity vulnerability with a CVSS score of 5.4 was published on 2026-09-22 via NVD.

vulnfeed aggregates 14151 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.