CVE-2026-90632

Full vulnerability record from the local CVENow database.

Description

Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-04 11:17:19.717000

Last modified

2026-11-04 11:17:19.717000

View original CVE JSON

{
  "id": "CVE-2026-90632",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-04T11:17:19.717",
  "lastModified": "2026-11-04T11:17:19.717",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache OpenOffice documents can include multimedia content (audio, video, etc.)\n\nA crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF.\n\nUsers are recommended to upgrade to version 4.1.17, which fixes this issue."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache OpenOffice",
          "defaultStatus": "unaffected",
          "packageURL": "pkg:software-id/apache.org/openoffice",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "4.1.16",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-552"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread.html/9rrjtmlnmg47m6soyrl83rz28dbsyqvk",
      "source": "[email protected]"
    }
  ]
}