It was discovered that missing input sanitising in Libreoffice’s filter
for HWP documents may result in the execution of arbitrary code if a
malformed document is opened.