CVE-2026-90626
Full vulnerability record from the local CVENow database.
Description
An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
Published
2026-11-04 11:17:19.097000
Last modified
2026-11-04 11:17:19.097000
View original CVE JSON
{
"id": "CVE-2026-90626",
"sourceIdentifier": "[email protected]",
"published": "2026-11-04T11:17:19.097",
"lastModified": "2026-11-04T11:17:19.097",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Apache Software Foundation",
"product": "Apache OpenOffice",
"defaultStatus": "unaffected",
"packageURL": "pkg:software-id/apache.org/openoffice",
"versions": [
{
"version": "0",
"lessThanOrEqual": "4.1.16",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"references": [
{
"url": "https://lists.apache.org/thread.html/n2qgb44t8lom9s9z4xwqs3dt3mx0cggy",
"source": "[email protected]"
}
]
}