Apache OpenOffice out-of-bounds write in PDF import
Original title: CVE-2026-90634: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Apache OpenOffice through 4.1.16 allows out-of-bounds memory write when importing encrypted PDF files, causing crash or memory corruption.
An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. The issue is fixed in version 4.1.17. Credit given to anonymous researcher working with TrendAI Zero Day Initiative.
- Affects Apache OpenOffice through 4.1.16.
- Caused by crafted encrypted PDF file.
- Leads to out-of-bounds memory write.
- Upgrade to 4.1.17 fixes the issue.
Impact: Out-of-bounds memory write leading to crash or corruption
- 1.Upgrade to version 4.1.17.
- CVEs
- CVE-2026-90634
- Vendors
- Apache
- Products
- OpenOffice
- Organizations
- TrendAI Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-90634 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4. 1. 16 Description: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.