Heap Buffer Overflow (CVE‑2026‑76181) in LibreOffice dBase File Parsing Enables Remote Code Execution
What It Is — A heap‑based buffer overflow exists in LibreOffice’s handling of dBase index files referenced from .odb database files. The parser fails to validate the length of user‑supplied data before copying it to a heap buffer, allowing an attacker who convinces a user to open a crafted file (or visit a malicious page that triggers the file load) to execute arbitrary code in the context of the LibreOffice process. The vulnerability is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. LibreOffice has released a security update that corrects the flaw.
Affected Products – LibreOffice (all supported versions prior to the November 2026 security update).
Why It Matters for Trust & Control Assurance – This issue tests an organization’s vulnerability‑management control: timely detection, patching, and evidence of remediation are essential to demonstrate a robust security posture across frameworks such as NIST CSF 2.0.
Recommended Actions –
- Deploy the LibreOffice update released Nov 6 2026.
- Verify installed versions across all endpoints and update inventory records.
- Enable logging of LibreOffice process launches and monitor for anomalous behavior.
- Incorporate the patch into your continuous vulnerability‑management workflow.
Source: Zero Day Initiative advisory