Back to Database
Status published
High
CVE-2024-7788
Signatures in "repair mode" should not be trusted
Vulnerability Description
Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-7788
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Thanks to Thanks to Yufan You for finding and reporting this issue
- Thanks to Michael Stahl of allotropia for providing a fix
More from The Document Foundation
View All →CVE-2025-2866
PDF signature forgery with adbe.pkcs7.sha1 SubFilter
Low
2.4
CVE-2025-1080
Macro URL arbitrary script execution
High
7.2
CVE-2025-14714
TCC Bypass via Inherited Permissions in Bundled Interpreter
Low
0.9
CVE-2025-0514
Executable hyperlink Windows path targets executed unconditionally on activation
High
7.2
CVE-2024-6472
Ability to trust not validated macro signatures removed in high security mode
High
7.8
Affected Vendor
The Document Foundation
View all reports →Affected Software
LibreOffice
Vulnerable Versions:
24.2
Timeline
Official Publish:
September 17th, 2024
Last Modified:
October 12th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H