A cryptographic signature verification flaw in LibreOffice allows invalid PDF signatures using adbe.pkcs7.sha1 to be accepted as valid. This vulnerability affects LibreOffice versions from 24.8 up to but not including 24.8.6, and from 25.2 up to but not including 25.2.2. The issue could enable PDF signature spoofing due to improper validation.