CVE-2024-7788

Improper Digital Signature Invalidation  vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.

Score

CVSS 3.1 7.8 High

Status

Modified - security@documentfoundation.org

Published

2024-09-17

Last modified

2024-10-12

Weaknesses

CWE-347

Affected products

• Libreoffice (Libreoffice)
• Libreoffice (The Document Foundation)
• Libreoffice (Thedocumentfoundation)

References

• https://www.libreoffice.org/about-us/security/advisories/CVE-2024-7788
• https://lists.debian.org/debian-lts-announce/2024/10/msg00007.html