Skip to content
OpenAdvisories
High · 7.3 CVE-2026-90629 EUVD-2026-116878GHSA-pv52-gqgr-5x2q

Apache OpenOffice: Out of bounds memory access during WMF import

Published Nov 4, 2026 · Updated Nov 5, 2026 · Assigned by apache

Description

An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenOffice ≤ 4.1.16 —

Advisories 1

References