Apache OpenOffice out-of-bounds write in PDF import
Apache OpenOffice through 4.1.16 allows out-of-bounds memory write when importing encrypted PDF files, causing crash or memory corruption.
45
Product
OpenOffice
- Mentions · 7d11
- Mentions · 30d11
- All mentions11
- First seenNov 3, 2026
- Last mentioned7h ago
Timeline
11 articles · newest firstApache OpenOffice local file inclusion via GStreamer plugin
Apache OpenOffice through 4.1.16 allows crafted documents to load any local file contents through GStreamer multimedia component when saved or exported.
45
Apache OpenOffice documents load external links without prompt (CVE-2026-90631)
Apache OpenOffice through 4.1.16 allows external links to load without prompt, potentially leaking environment variables.
40
Apache OpenOffice WMF import allows out of bounds memory access (CVE-2026-90629)
Apache OpenOffice through 4.1.16 permits crafted WMF files to cause invalid memory access and program crash.
40
Apache OpenOffice CFF font handling causes stack overflow (CVE-2026-90628)
Apache OpenOffice through 4.1.16 permits crafted CFF fonts to cause stack overflow and program crash.
40
Apache OpenOffice vulnerable to local file inclusion (CVE-2026-90627)
Local file inclusion via SQL provider and flat file database references in Apache OpenOffice through 4.1.16.
50
Apache OpenOffice vulnerable to out-of-bounds write in PDF import (CVE-2026-90626)
Out-of-bounds write when importing encrypted PDF files in Apache OpenOffice through 4.1.16 allows program crash or memory corruption.
50
Apache OpenOffice vulnerable to heap-based buffer overflow in PDF parsing (CVE-2026-90624)
Heap-based buffer overflow in PDF import code of Apache OpenOffice through 4.1.16 can lead to remote code execution.
50
Apache OpenOffice before 4.1.17 has heap buffer overflow in DXF import (CVE-2026-59267)
Heap buffer overflow in Draw module of Apache OpenOffice 4.1.16 and earlier can cause memory corruption when opening crafted DXF documents.
40
Apache OpenOffice has uncontrolled search path element vulnerability in Windows installer (CVE-2026-59264)
Uncontrolled search path vulnerability in Windows installer of Apache OpenOffice up to 4.1.16.
30
Apache OpenOffice documents could display different data when opened with different programs (CVE-2026-59263)
Manipulated documents in Apache OpenOffice 4.1.16 and earlier may display substituted content instead of being reported as corrupt.
30
Related CVEs
by mentionsAppears with
- Apachevendor · 11
- TrendAI Zero Day Initiativeorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.