CVE-2021-40439

CVSS 3.1: 6.5 medium
EPSS: 4%p90
Published: Oct 7, 2021 · Oct 7, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-40439 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.

Vendors: apache

Products: openoffice

Weakness: CWE-611

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news

1 story

Apache OpenOffice users should upgrade to newest security release!

Help Net SecurityApr 22, 12:07 UTC · Apr 22, 2025VulnerabilityCVE-2021-33035 CVE-2021-40439 CVE-2021-41830+33 · 1 read