CVE-2026-8358: The Document Foundation Libreoffice

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of change. The importer then treated one change object as a different, larger type and wrote past the end of its allocation. In fixed versions records with a duplicate identifier are rejected.

Affected products

• The Document Foundation Libreoffice: from 25.8, before 25.8.7 (fixed in 25.8.7); from 26.2, before 26.2.4 (fixed in 26.2.4)

Published 2026-06-15. Last modified 2026-06-17.