medium5.5
CVE-2025-2866
Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation.
Impact
Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libreoffice | Libreoffice | from 24.8.0.1 before 24.8.6.0 from 25.2.0.1 before 25.2.2 Versions 24.8.0.0, 25.2.0.0 |