Skip to content
OpenAdvisories
High · 7.3 CVE-2026-90626 EUVD-2026-116875GHSA-jj47-f744-qvq6

Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Published Nov 4, 2026 · Updated Nov 5, 2026 · Assigned by apache

Description

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenOffice ≤ 4.1.16 —

Advisories 1

References