Skip to content
OpenAdvisories
High · 7.8 CVE-2022-33896 EUVD-2022-36933GHSA-9w8p-gv6j-vj3w

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A special…

Published Oct 7, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Hancom Hancom Office 2020 Hancom Office 2020 11.0.0.5357 —

References