Apache OpenOffice vulnerable to out-of-bounds write in PDF import (CVE-2026-90626)
Original title: CVE-2026-90626: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
Out-of-bounds write when importing encrypted PDF files in Apache OpenOffice through 4.1.16 allows program crash or memory corruption.
Apache OpenOffice versions through 4.1.16 allow a crafted PDF to cause an out-of-bounds memory write during encrypted PDF import. This can lead to program crash or memory corruption. The vulnerability was reported on oss-security. Users are recommended to upgrade to version 4.1.17.
- Out-of-bounds write in PDF import code
- Affects Apache OpenOffice through 4.1.16
- Fixed in version 4.1.17
Impact: out-of-bounds memory write causing crash or corruption
- 1.Upgrade to Apache OpenOffice 4.1.17
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-90626 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4. 1. 16 Description: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.