Apache OpenOffice before 4.1.17 has heap buffer overflow in DXF import (CVE-2026-59267)
Original title: CVE-2026-59267: Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
Heap buffer overflow in Draw module of Apache OpenOffice 4.1.16 and earlier can cause memory corruption when opening crafted DXF documents.
A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
- Affected versions: Apache OpenOffice through 4.1.16
- Upgrade to 4.1.17 fixes the issue
- Severity: medium
Impact: heap buffer overflow leading to memory corruption and potential crash
| Product | Affected | Fixed in |
|---|---|---|
| Apache OpenOffice | through 4.1.16 | 4.1.17 |
- 1.Upgrade to version 4.1.17
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-59267 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: CVSS 4. 0: 5. 8 (medium) CVSS:4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.