CVE-2026-6040 — A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, s — CVE Database · The Intelligence Room