CVE-2016-4324: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 15.10 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Libreoffice Libreoffice: up to and including 5.1.3

Published 2016-07-08. Last modified 2026-06-17.