Skip to content
OpenAdvisories
High · 7.3 CVE-2026-90624 EUVD-2026-116874GHSA-gf8j-hhcq-h746

Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability

Published Nov 4, 2026 · Updated Nov 5, 2026 · Assigned by apache

Description

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenOffice ≤ 4.1.16 —

Advisories 1

References