CVE-2024-3044: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 39 only
• Libreoffice Libreoffice: before 7.6.7.1 (fixed in 7.6.7.1); from 24.2.0.0, before 24.2.3.1 (fixed in 24.2.3.1)

Published 2024-05-14. Last modified 2026-06-17.