CVE-2026-8357

HighCVSS 7.8

Published: 15/06/2026(UTC)Updated: 28/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A heap buffer overflow vulnerability in LibreOffice Calc occurs when compiling a very long formula with many opening tokens. The nesting depth tracking array is too small, causing a write past its end.

Risk Assessment

The organization risks application crashes or potential code execution when opening a crafted spreadsheet with a very long formula.

Recommendation

Update LibreOffice to the latest version containing the security fix. Avoid opening spreadsheets from untrusted sources.

Other vulnerabilities in LibreOffice Calc

CVE-2026-8358Medium
LibreOffice Calc had a heap buffer overflow vulnerability when a document reused the same change identifier for two different kinds of changes. This led to writing past the end of its allocation.

Original NVD description (English source)

LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.