Vulnerability Description
LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary and was used to fill a fixed size key buffer without being checked against it, so a length larger than that buffer wrote past its end. In fixed versions a declared key length larger than the buffer is rejected.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-63273?
CVE-2026-63273 is a documented vulnerability. LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own encryption dictionary...
How severe is CVE-2026-63273?
CVSS scoring is not yet available for CVE-2026-63273. Check NVD for updates.
Is there a patch for CVE-2026-63273?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.