Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilitymedium

Multiple Vulnerabilities in Apache OpenOffice 4.1.16 Fixed in 4.1.17

1 source · 7 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Multiple buffer overflows and issues in Apache OpenOffice through 4.1.16 fixed in 4.1.17, including potential RCE.

Apache OpenOffice versions through 4.1.16 contain multiple vulnerabilities reported on oss-security. These include heap buffer overflows in DXF and PDF imports that can cause memory corruption or remote code execution, out-of-bounds writes in encrypted PDF import, local file inclusion via SQL provider and flat file database references, stack overflow in CFF font handling, and out-of-bounds access in WMF import. All issues are fixed in version 4.1.17.

Key facts
  • CVE-2026-59267: Heap buffer overflow in DXF LWPOLYLINE import
  • CVE-2026-90624: Heap-based buffer overflow in PDF parsing, possible RCE
  • CVE-2026-90626: Out-of-bounds write in encrypted PDF import
  • CVE-2026-90627: Local file inclusion via SQL provider
  • CVE-2026-90628: Stack overflow in CFF hint handling
  • CVE-2026-90629: Out-of-bounds access in WMF import
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 3, 2026Seven CVEs disclosed on oss-security for Apache OpenOffice · oss-security

What each outlet adds

beyond the shared facts
  • oss-securityReports seven CVEs in OpenOffice 4.1.16 fixed in 4.1.17
  • TrendAI Zero Day InitiativeCredit for anonymous reporter on PDF parsing and encrypted PDF issues
  • Anthropic and Ada LogicsCredit for discovering stack overflow in CFF and WMF import issues
CVEs
CVE-2026-90627CVE-2026-90626CVE-2026-90624CVE-2026-90634CVE-2026-90629CVE-2026-90628CVE-2026-59267
Vendors
Apache
Products
OpenOffice
Organizations
TrendAI Zero Day Initiative

Coverage

oldest first · one row per article · UTC
  1. · 8h ago oss-securityFirst report

    Apache OpenOffice before 4.1.17 has heap buffer overflow in DXF import (CVE-2026-59267)

    Heap buffer overflow in Draw module of Apache OpenOffice 4.1.16 and earlier can cause memory corruption when opening crafted DXF documents.

  2. · 8h ago oss-security

    Apache OpenOffice vulnerable to heap-based buffer overflow in PDF parsing (CVE-2026-90624)

    Heap-based buffer overflow in PDF import code of Apache OpenOffice through 4.1.16 can lead to remote code execution.

  3. · 8h ago oss-security

    Apache OpenOffice vulnerable to out-of-bounds write in PDF import (CVE-2026-90626)

    Out-of-bounds write when importing encrypted PDF files in Apache OpenOffice through 4.1.16 allows program crash or memory corruption.

  4. · 8h ago oss-security

    Apache OpenOffice vulnerable to local file inclusion (CVE-2026-90627)

    Local file inclusion via SQL provider and flat file database references in Apache OpenOffice through 4.1.16.

  5. · 8h ago oss-security

    Apache OpenOffice CFF font handling causes stack overflow (CVE-2026-90628)

    Apache OpenOffice through 4.1.16 permits crafted CFF fonts to cause stack overflow and program crash.

  6. · 8h ago oss-security

    Apache OpenOffice WMF import allows out of bounds memory access (CVE-2026-90629)

    Apache OpenOffice through 4.1.16 permits crafted WMF files to cause invalid memory access and program crash.

  7. · 8h ago oss-security

    Apache OpenOffice out-of-bounds write in PDF import

    Apache OpenOffice through 4.1.16 allows out-of-bounds memory write when importing encrypted PDF files, causing crash or memory corruption.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-59267
———
CVE-2026-90624
———
CVE-2026-90626
———
CVE-2026-90627
———
CVE-2026-90628
———
CVE-2026-90629
———
CVE-2026-90634
———