CVE-2026-6039: the document foundation libreoffice Numeric Truncation Error

Vulnerability summary

CVE-2026-6039 is a medium (CVSS 5.4) Numeric Truncation Error vulnerability in the document foundation libreoffice. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.6% of scored vulnerabilities.

Timeline

1. 15-06-2026
   PublishedVulnerability first disclosed.
2. 15-06-2026
   Last modifiedVulnerability information updated.

Description

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.

• CWE-197Numeric Truncation ErrorTruncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.