Description
A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNEF files and the application allows untrusted users to supply them, then a carefully crafted file can cause an Out of Memory exception. This issue affects poi-scratchpad version 5.2.0 and prior versions. Users are recommended to upgrade to poi-scratchpad 5.2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | poi-scratchpad | unspecified – ≤ 5.2.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | lucene-solr +1 | No fix yet | — |
| Ubuntu 26.04 LTS | lucene-solr +1 | No fix yet | — |
| Ubuntu 25.10 | lucene-solr +1 | No fix yet | — |
| Ubuntu 24.04 LTS | lucene-solr +1 | No fix yet | — |
| Ubuntu 22.04 LTS | lucene-solr +1 | No fix yet | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | lucene-solr +1 | No fix yet | — |
| Ubuntu 18.04 LTS | libapache-poi-java | No fix yet | — |
| Ubuntu 16.04 LTS | libapache-poi-java | No fix yet | — |
| Ubuntu Pro 18.04 LTS | lucene-solr | No fix yet | — |
| Ubuntu Pro 16.04 LTS | lucene-solr | No fix yet | — |
| Ubuntu Pro 14.04 LTS | lucene-solr | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.poi:poi-scratchpad | >= 3.8-beta1, < 5.2.1 | 5.2.1 | GHSA-mqvp-7rrg-9jxc |
Advisories 3
- WID-SEC-2022-0607 Red Hat FUSE: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 9, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2023-0127 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 17, 2023