CVE-2024-12425: Debian Linux

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font files. This issue affects LibreOffice: from 24.8 before < 24.8.4.

Affected products

• Debian Debian Linux: version 11.0 only
• Libreoffice Libreoffice: from 24.8.0.1, before 24.8.4 (fixed in 24.8.4); version 24.8.0.0 only

Published 2025-01-07. Last modified 2026-06-17.