Upstream information
Description
Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.
SUSE information
Overall state of this security issue: Does not affect SUSE products
SUSE Bugzilla entry: 1264357 [NEW] No SUSE Security Announcements cross referenced.SUSE Timeline for this CVE
CVE page created: Thu May 7 13:09:39 2026CVE page last modified: Fri May 8 11:25:08 2026