cvedb.io
CVE-2026-4430
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2026-05-07T08:16:00.967 · Last modified 2026-06-17T10:56:33.603

Summary

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.

Affected products

libreoffice — libreoffice

Does this affect you?

Add your gear to cvedb and we'll alert you only when libreoffice ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.