Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-8357

Heap buffer overflow in Calc formula compilation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Document Fdn.

Description

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Document Foundation LibreOffice

Default version status: unknown

  • 26.2 to < < 26.2.4affected

References