{"id":"CVE-2017-7856","details":"LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.","modified":"2026-07-08T12:28:26.971704Z","published":"2017-04-14T04:59:00.227Z","references":[{"type":"ADVISORY","url":"http://www.libreoffice.org/about-us/security/advisories/cve-2017-7856/"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/97667"},{"type":"ADVISORY","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=817"},{"type":"FIX","url":"https://github.com/LibreOffice/core/commit/28e61b634353110445e334ccaa415d7fb6629d62"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libreoffice/core","events":[{"introduced":"0"},{"last_affected":"e37e437cb0cfa0eab9d2e98a23f5074ae118d3df"},{"fixed":"28e61b634353110445e334ccaa415d7fb6629d62"}],"database_specific":{"cpe":"cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"5.2.6.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["libreoffice-5.2.6.1","libreoffice-5-3-branch-point","libreoffice-5-2-branch-point","libreoffice-5-1-branch-point","libreoffice-5-0-branch-point","libreoffice-4-4-branch-point","libreoffice-4-3-branch-point","sdremote-2.0.0","libreoffice-4-2-branch-point","libreoffice-4-2-milestone-1","libreoffice-4-1-branch-point","libreoffice-4-0-branch-point","libreoffice-3-6-branch-point","libreoffice-3.5.0.0","libreoffice-3-5-branch-point","windows_build_successful_2011_11_08","MELD_LIBREOFFICE_REPOS"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7856.json","vanir_signatures_modified":"2026-07-08T12:28:26Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"298204384063460422800894264659505851315","length":18329},"id":"CVE-2017-7856-4acdecd9","signature_type":"Function","signature_version":"v1","source":"https://github.com/libreoffice/core/commit/28e61b634353110445e334ccaa415d7fb6629d62","target":{"file":"vcl/source/gdi/svmconverter.cxx","function":"SVMConverter::ImplConvertFromSVM1"}},{"id":"CVE-2017-7856-caaf43c2","signature_type":"Line","signature_version":"v1","source":"https://github.com/libreoffice/core/commit/28e61b634353110445e334ccaa415d7fb6629d62","target":{"file":"vcl/source/gdi/svmconverter.cxx"},"deprecated":false,"digest":{"line_hashes":["56997574373070255410130733878905353393","201536209379238536522222923938150462503","221828152900981007123820303299634245832","86529089122140294639030571344540798397"],"threshold":0.9}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}