OSI vulnerabilities in LibreOffice

Description

Information disclosure vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges.

Original advisories

• CVE-2024-12425: Path traversal leading to arbitrary .ttf file write

• CVE-2024-12426: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables

Related products

• LibreOffice

CVE list

• CVE-2024-12425
  warning
• CVE-2024-12426
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com