Apache OpenOffice WMF import allows out of bounds memory access (CVE-2026-90629)
Original title: CVE-2026-90629: Apache OpenOffice: Out of bounds memory access during WMF import
Apache OpenOffice through 4.1.16 permits crafted WMF files to cause invalid memory access and program crash.
An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17.
- Issue discovered by Anthropic and Ada Logics
- Credit: Anthropic and Ada Logics (finder)
Impact: Program crash or memory corruption
| Product | Affected | Fixed in |
|---|---|---|
| Apache OpenOffice | through 4.1.16 | 4.1.17 |
- 1.Upgrade to version 4.1.17
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-90629 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4. 1. 16 Description: An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.