CVE-2026-90624

Full vulnerability record from the local CVENow database.

Description

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-04 11:17:18.970000

Last modified

2026-11-04 11:17:18.970000

View original CVE JSON

{
  "id": "CVE-2026-90624",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-04T11:17:18.970",
  "lastModified": "2026-11-04T11:17:18.970",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache OpenOffice",
          "defaultStatus": "unaffected",
          "packageURL": "pkg:software-id/apache.org/openoffice",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "4.1.16",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread.html/w1047xm52vyfjt79kw2n0d3ln6sq9g5s",
      "source": "[email protected]"
    }
  ]
}