The Document Foundation · weakness class
Memory Corruption
16 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.
- Array Index UnderFlow in Calc Formula Parsing
- Heap buffer overflow in spreadsheet tracked-changes import
- Heap buffer overflow in Calc formula compilation
- Heap buffer overflow in EMF+ gradient brush import
- Heap buffer overflow in WMF text record import
- Heap buffer overflow in DXF polyline import
- Heap buffer overflow in PDF import stream handling
- Stack buffer overflow in CFF to Type 1 font conversion
- Stack buffer overflow in CFF font hint handling
- Heap use-after-free in ODF number-format blank-width parsing
- Stack buffer overflow in PPT presentation import
- Out of bounds read in PICT image import
- Heap buffer overflow in OOXML text box element import
- Heap buffer overflow in dBASE index import
- Heap buffer overflow in PDF import encryption handling
- Heap Buffer Overflow in AgileEngine
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.