LibreOffice Draw can import encrypted PDF files. An attacker can craft a PDF that includes a decryption key longer than the fixed‑size buffer used by the import code. Because the key length is taken directly from the PDF’s encryption dictionary and not checked against the buffer size, a longer key overflows the heap. The overflow can corrupt memory, potentially leading to parameter tampering, denial of service, or arbitrary code execution under certain conditions.

The vulnerability affects LibreOffice Draw installations from The Document Foundation that are earlier than the version in which the overflow check was added. All older releases that do not reject overly long decryption keys are impacted.

The CVSS score of 5.4 indicates a moderate severity. EPSS is not available and the issue is not listed in CISA KEV, suggesting no large‑scale exploitation has been documented. Attackers can exploit the flaw by providing a malicious encrypted PDF to a user running LibreOffice Draw—a local attack vector. If the buffer overflow is successfully triggered, a local user could gain code execution or cause the application to crash, exposing the system to further compromise.