Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-63279

Out of bounds read in PICT image import

Description

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the last entry read memory outside the palette. In fixed versions the palette index is limited to the entries present.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Document Foundation LibreOffice

Default version status: unknown

  • 26.2 to < < 26.2.5affected

References