Apache OpenOffice through 4.1.16 heap out-of-bounds write in WW8 PLCF reader
Original title: CVE-2026-59268: Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader
Heap out-of-bounds write in Apache OpenOffice versions through 4.1.16 allows crafted Microsoft Word documents to crash the program or corrupt memory; upgrade to 4.1.17 recommended.
An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a Microsoft Word document that would crash the program, or otherwise corrupt other memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
- Affects Apache OpenOffice through 4.1.16
- Credit: Yukihiro Nakamura (reporter)
Impact: Crash or memory corruption via crafted Microsoft Word document
- 1.Upgrade to version 4.1.17
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-59268 | — | — | — |
From the original article
Posted by Arrigo Marchiori on Nov 03 Severity: important Affected versions: - Apache OpenOffice through 4. 1. 16 Description: An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.