CVE-2026-63274
— UNSCOREDPublished 2026-09-22 · Updated 2026-09-22
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and was not checked against the number of bytes actually present, so copying the stream read and wrote past the end of the buffer holding it. In fixed versions the declared length is clamped to the bytes actually read.
Weaknesses
CWE-125, CWE-787
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2026-102757PoC
- HIGHCVE-2026-61714PoC
- UNSCOREDCVE-2026-63272
- HIGHCVE-2026-10027
- HIGHCVE-2026-100387PoC
- HIGHCVE-2026-100504PoC
- MEDIUMCVE-2026-100505PoC
- CRITICALCVE-2026-100740
Related by shared AI tags and CWE weakness class. Browse the full archive.