CVE-2017-7856

Critical

Published: 14/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in arbitrary code execution or application crashes.

Recommendation

It is recommended to update LibreOffice to a version after 2017-03-11 to mitigate this vulnerability.

Original NVD description (English source)

LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.