Skip to content
OpenAdvisories
Low USN-7504-1 1 CVE

libreoffice vulnerability

Published May 8, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Juraj Šarinay discovered that LibreOffice incorrectly handled verifying
PDF signatures. A remote attacker could possibly use this issue to
generate PDF files that appear to have a valid signature.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libreoffice 1:6.4.7-0ubuntu0.20.04.15
Ubuntu · 22.04 LTS 22.04:LTS libreoffice 1:7.3.7-0ubuntu0.22.04.10
Ubuntu · 24.04 LTS 24.04:LTS libreoffice 4:24.2.7-0ubuntu0.24.04.4

Vulnerabilities 1

  • Low 2.4
    CVE-2025-2866

    PDF signature forgery with adbe.pkcs7.sha1 SubFilter

    Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid sign…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-2866