libreoffice

Direct Vulnerabilities

Known vulnerabilities in the libreoffice package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-63277	<4:25.2.3-2+deb13u8
L CVE-2026-63270	<4:25.2.3-2+deb13u8
L CVE-2026-63269	<4:25.2.3-2+deb13u8
L CVE-2026-63268	<4:25.2.3-2+deb13u8
L CVE-2026-63267	<4:25.2.3-2+deb13u8
L CVE-2026-63266	<4:25.2.3-2+deb13u8
L CVE-2026-63279	<4:25.2.3-2+deb13u7
L CVE-2026-63278	<4:25.2.3-2+deb13u7
L CVE-2026-63276	<4:25.2.3-2+deb13u7
L CVE-2026-63275	<4:25.2.3-2+deb13u7
L CVE-2026-63274	<4:25.2.3-2+deb13u7
L CVE-2026-63273	<4:25.2.3-2+deb13u7
L CVE-2026-63272	<4:25.2.3-2+deb13u7
M CVE-2024-12426	<4:7.4.7-1+deb12u6
L CVE-2024-12425	<4:7.4.7-1+deb12u6
H Insecure Default Initialization of Resource	<1:7.3.1-1
H CVE-2022-26307	<1:7.3.3~rc1-2
H Use of Insufficiently Random Values	<1:7.3.3~rc1-2
H Improper Certificate Validation	<1:7.3.2~rc2-1
H Buffer Overflow	<1:4.3.1-1
H Improper Certificate Validation	<1:7.3.0-1
H Improper Certificate Validation	<1:7.2.0-2
H Improper Certificate Validation	<1:7.2.0-2
M Improper Input Validation	<1:6.4.4-1
M CVE-2020-12802	<1:6.4.4-1
M Cleartext Storage of Sensitive Information	<1:6.4.3-1
C Directory Traversal	<1:6.1.3-1
H Incorrect Calculation	<1:4.0.3-1
H Information Exposure	<4:25.2.3-2+deb13u6
H Improper Validation of Array Index	<1:6.0.2-1
H Use After Free	<1:6.0.1-1
H Out-of-bounds Write	<1:5.0.2-1
H Out-of-bounds Write	<1:5.0.2-1
C Out-of-bounds Write	<1:5.2.5-1
L CVE-2026-8358	<4:7.4.7-1+deb12u13
L CVE-2026-8357	<4:7.4.7-1+deb12u13
L CVE-2026-8356	<4:7.4.7-1+deb12u13
L CVE-2026-6047	<4:25.2.3-2+deb13u6
L CVE-2026-6045	<4:7.4.7-1+deb12u13
L CVE-2026-6039	<4:7.4.7-1+deb12u13
H CVE-2026-4430	<4:7.4.7-1+deb12u11
M Improper Verification of Cryptographic Signature	<4:7.4.7-1+deb12u8
H CVE-2025-1080	<4:7.4.7-1+deb12u7
H Improper Verification of Cryptographic Signature	<4:7.4.7-1+deb12u5
L CVE-2024-6472	<4:7.4.7-1+deb12u4
M CVE-2024-3044	<4:7.4.7-1+deb12u2
H Improper Preservation of Permissions	<4:7.4.7-1+deb12u1
H CVE-2023-6185	<4:7.4.7-1+deb12u1
M CVE-2023-2255	<4:7.4.5-3
H Improper Validation of Array Index	<4:7.4.5-3
M Arbitrary Argument Injection	<1:7.4.1~rc2-3
H Directory Traversal	<1:6.3.1~rc2-1
H Improper Encoding or Escaping of Output	<1:6.3.0-1
H Directory Traversal	<1:6.3.0-1
C Improper Input Validation	<1:6.3.0-1
C Improper Input Validation	<1:6.3.0-1
M CVE-2019-9849	<1:6.3.0~rc1-1
C Arbitrary Code Injection	<1:6.3.0~rc1-1
C CVE-2018-6871	<1:6.0.1-1
H Out-of-bounds Write	<1:3.4.3-1
C Out-of-bounds Write	<1:5.2.5-1
M Information Exposure	<1:5.2.3-1
H Improper Input Validation	<1:5.1.4~rc1-1
H Out-of-bounds Read	<1:4.3.3-1
H Out-of-Bounds	<1:5.0.5~rc1-1
H Out-of-Bounds	<1:5.0.5~rc1-1
M Out-of-Bounds	<1:5.0.1~rc2-1
M Numeric Errors	<1:5.0.1~rc1-1
M Integer Underflow	<1:5.0.1~rc1-1
M Information Exposure	<1:5.0.1~rc1-1
M Out-of-bounds Write	<1:4.4.2-1
H Improper Input Validation	<1:4.3.3-2
H CVE-2014-3693	<1:4.3.3~rc2~git20141011-1
C CVE-2014-0247	<1:4.2.5-1
M Out-of-bounds Write	<1:4.1.0-1
M Out-of-bounds Write	<1:3.4.3-1
M Exposure of Resource to Wrong Sphere	<4:25.2.3-2+deb13u6
M CVE-2012-4233	<1:3.5.4+dfsg-3
H Out-of-bounds Write	<1:3.5.4-7
M Numeric Errors	<1:3.5.2~rc2-1
H Numeric Errors	<1:3.4.5-1
M Out-of-Bounds	<1:3.4.3-1
H Out-of-Bounds	<1:3.3.3-1

Vulnerability

Vulnerable Version

CVE-2026-63277

<4:25.2.3-2+deb13u8