Vulnerability Spotlight: Libre Office RTF Vulnerability

Summary: Cisco Talos disclosed CVE-2016-4324 / TALOS-2016-0126, a use-after-free vulnerability in LibreOffice's RTF parser triggered by a crafted document containing both stylesheet and superscript tokens, which causes access to an invalid heap pointer and can be manipulated to execute arbitrary code. The flaw requires the user to open the file, and Talos states it has no evidence the vulnerability is being exploited in the wild while recommending administrators upgrade to the latest version of LibreOffice.
What you should know: The attack only fires when a user opens a malicious RTF file, and RTF remains widely supported by word processing suites even though its standard has not changed since 2008 - the same vector attackers have used against MS Office parsers.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2016-4324
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026