Critical LibreOffice Vulnerability Allows DoS and Potential Code Execution

A significant vulnerability in LibreOffice has been identified, allowing attackers to crash the application or execute arbitrary code by opening specially crafted OOXML documents. Discovered by Duc Anh Nguyen, this flaw arises from the incorrect handling of mismatched encryption salt parameters. Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10. The vulnerability could lead to a denial of service (DoS) or unauthorized code execution, posing a serious risk to users. Users are advised to update their systems to the latest package versions to mitigate this risk. The update includes additional bug fixes and is part of a new upstream release. Ubuntu Pro offers extended security coverage for affected packages.

Key Points: • LibreOffice vulnerability allows DoS and potential code execution via crafted files. • Affected systems include Ubuntu 26.04 LTS and Ubuntu 25.10. • Users should update to the latest package versions to mitigate the risk.