CVE-2026-6039: Memory Corruption

Description

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.

Is your site exposed to CVE-2026-6039?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0016

Probability of exploitation

0.05%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

Weakness Type (CWE)

CWE-197 CWE-197

CWE-787 Out-of-bounds Write

References

Other References

https://www.libreoffice.org/about-us/security/advisories/cve-2026-6039

Frequently Asked Questions

What is CVE-2026-6039? +

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was used to fill it, so a polyline whose point count exceeded the 16-bit range was written past the end of the buffer. In fixed versions such oversized polylines are rejected.

How do I check if I'm vulnerable to CVE-2026-6039? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-6965 9.8

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of …

CVE-2024-43639 9.8

Windows KDC Proxy Remote Code Execution Vulnerability

CVE-2023-32143 8.8

D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on …

CVE-2024-30009 8.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43519 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-49018 8.8

SQL Server Native Client Remote Code Execution Vulnerability

CVE-2026-6039