CVE-2026-91752: GNU libextractor < 1.15 Stack Overflow via OLE2
GNU libextractor before 1.15 has a stack-based buffer overflow (CVE-2026-91752) in its OLE2 parser, triggerable via crafted files.
A stack-based buffer overflow was identified in GNU libextractor's OLE2 plugin in versions prior to 1.15, assigned CVE-2026-91752. The flaw resides in the process_star_office function, which sizes a variable-length stack array using attacker-controlled OLE2 stream data. Attackers can craft malicious OLE2/StarOffice files to trigger the overflow. The issue was disclosed on the oss-security mailing list by researcher Haitam Lazaar on September 16, 2026.
- Stack-based buffer overflow in libextractor's OLE2 plugin affects versions before 1.15
- Vulnerability is in process_star_office, which sizes a stack array from attacker-controlled stream data
- Assigned CVE-2026-91752; fixed in GNU libextractor 1.15
- Disclosed publicly on the oss-security mailing list by Haitam Lazaar
- CVEs
- CVE-2026-91752
- Vendors
- GNU
- Products
- libextractor
- Organizations
- GNU
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91752 | Stack Overflow DoS in GNU libextractor StarOffice Parser (pre-1.15) | 8.7 | — |
From the original article
Posted by Haitam Lazaar on Sep 16 Hello oss-security, A stack-based buffer overflow vulnerability was identified in GNU libextractor's OLE2 plugin for versions prior to 1. 15. The vulnerability has been assigned CVE-2026-91752.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.