How severe is CVE-2015-5212?

CVE-2015-5212 has a CVSS 2.0 base score of 6.8, rated medium severity.

Is CVE-2015-5212 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (95th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-5212?

CVE-2015-5212 primarily affects Libreoffice. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-5212?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2015-5212 published?

CVE-2015-5212 was published on 2015-11-10 and last updated on 2026-06-17.

CVE-2015-5212

CVE-2015-5212 is a medium-severity vulnerability in Libreoffice with a CVSS 2.0 base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-191.

Key facts

Severity: Medium (CVSS 2.0 base score 6.8)
EPSS exploit prediction: 9% (95th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-191
Affected product: Libreoffice
Published: 2015-11-10
Last modified: 2026-06-17

Description

Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.

Frequently asked questions

What is CVE-2015-5212?: Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
How severe is CVE-2015-5212?: CVE-2015-5212 has a CVSS 2.0 base score of 6.8, rated medium severity.
Is CVE-2015-5212 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2015-5212?: CVE-2015-5212 primarily affects Libreoffice. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2015-5212?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2015-5212 published?: CVE-2015-5212 was published on 2015-11-10 and last updated on 2026-06-17.

References

Affected products (7)

cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

More vulnerabilities in Libreoffice

CVE-2014-0247 — Critical (CVSS 10.0): LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors,…
CVE-2024-5261 — Critical (CVSS 9.8): Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification…
CVE-2019-9855 — Critical (CVSS 9.8): LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute…
CVE-2019-9851 — Critical (CVSS 9.8): LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute…
CVE-2019-9850 — Critical (CVSS 9.8): LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute…
CVE-2019-9848 — Critical (CVSS 9.8): LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document…

All CVEs affecting Libreoffice →

Other CWE-191 (Integer Underflow) vulnerabilities

CVE-2007-0063 — Critical (CVSS 10.0): Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build…
CVE-2026-53176 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than…
CVE-2026-37534 — Critical (CVSS 9.8): Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in…
CVE-2025-52471 — Critical (CVSS 9.8): ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been…
CVE-2025-29909 — Critical (CVSS 9.8): CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures…
CVE-2024-47606 — Critical (CVSS 9.8): GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in…

Browse all CWE-191 (Integer Underflow) vulnerabilities →