CVE-2026-8356: Stack buffer overflow in PPT presentation import
Last updated 4 July 2026
Other sources
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were filled from the file, but the write position was not reset between the two passes over the record, so a file whose combined colour counts exceeded the table size wrote past the end of the tables on the stack. In fixed versions the unused second pass is no longer read into those tables.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libreofficeto a version that resolves this vulnerability.Fixed in 4:7.4.7-1+deb12u14Fixed in 4:7.4.7-1+deb12u13Fixed in 4:25.2.3-2+deb13u6Fixed in 4:25.2.3-2+deb13u5Fixed in 4:26.2.4.2-2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8356?
The severity of CVE-2026-8356 is medium with a score of 5.4 according to the CVSS base score.
How do I fix CVE-2026-8356?
To fix CVE-2026-8356, update LibreOffice to the latest version provided by The Document Foundation.
What does CVE-2026-8356 exploit?
CVE-2026-8356 exploits a stack buffer overflow during the import of legacy PPT presentations.
Who is affected by CVE-2026-8356?
Users of LibreOffice who import presentations in the legacy binary PPT format are affected by CVE-2026-8356.
What type of vulnerability is CVE-2026-8356?
CVE-2026-8356 is classified as a buffer overflow vulnerability.