Vulnerability · Published Sep 22, 2026 · Assigned by Document Fdn.
CVE-2026-63279Out of bounds read in PICT image import
Medium 5.4
In plain English
A medium-severity out-of-bounds read in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the last entry read memory outside the palette. In fixed versions the palette index is limited to the entries present.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libreoffice | no fix listed | DEBIAN-CVE-2026-63279 |
| Debian:13 | libreoffice | 4:25.2.3-2+deb13u7 | DEBIAN-CVE-2026-63279 |
| Debian:14 | libreoffice | 4:26.2.5.2-1 | DEBIAN-CVE-2026-63279 |
| Ubuntu:22.04:LTS | libreoffice | 1:7.3.7-0ubuntu0.22.04.13 | UBUNTU-CVE-2026-63279 |
| Ubuntu:22.04:LTS | libreoffice | 1:7.3.7-0ubuntu0.22.04.13 | USN-8868-1 |
| Ubuntu:24.04:LTS | libreoffice | 4:24.2.7-0ubuntu0.24.04.7 | USN-8868-1 |
| Ubuntu:24.04:LTS | libreoffice | 4:24.2.7-0ubuntu0.24.04.7 | UBUNTU-CVE-2026-63279 |
| Ubuntu:26.04:LTS | libreoffice | 4:26.2.6.3-0ubuntu0.26.04.2 | USN-8868-1 |
| Ubuntu:26.04:LTS | libreoffice | 4:26.2.6.3-0ubuntu0.26.04.2 | UBUNTU-CVE-2026-63279 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Document Foundation | LibreOffice | 26.2 – before < 26.2.5 |
Weakness: CWE-125 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:P