high7.8
CVE-2026-8357
LibreOffice Calc compiles cell formulas when opening a spreadsheet.
Impact
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that tracks nesting depth was allocated one element too small for that worst case, so such a formula wrote one element past its end. In fixed versions the array is sized to hold the largest possible nesting.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://www.libreoffice.org/about-us/security/advisories/cve-2026-8357
- https://access.redhat.com/errata/RHSA-2026:35839
- https://access.redhat.com/errata/RHSA-2026:36832
- https://access.redhat.com/errata/RHSA-2026:43423
- https://access.redhat.com/errata/RHSA-2026:43424
- https://access.redhat.com/errata/RHSA-2026:43425
- https://access.redhat.com/errata/RHSA-2026:43460
- https://access.redhat.com/errata/RHSA-2026:43461
- https://access.redhat.com/errata/RHSA-2026:46386
- https://access.redhat.com/errata/RHSA-2026:46387
- https://access.redhat.com/security/cve/CVE-2026-8357
- https://bugzilla.redhat.com/show_bug.cgi?id=2488964
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8357.json