~ / search / CVE-2026-59267

CVE-2026-59267

Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption

State: published CNA: apache CVSS 4.0 5.8 Medium NVD: analyzed

Description

A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Affected products

VendorProductVersions
Apache Software Foundation Apache OpenOffice ≤4.1.16

Affected configurations (NVD)

CPE applicability statements from the NVD's analysis: 1 configuration, 1 CPE match. In a configuration marked “all of”, the vulnerable product is affected only together with the others listed (for example the hardware it runs on).

CPE matches
#CPEVersionsRole
1 apache openoffice
cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*		 < 4.1.17 vulnerable

References

External links from the record. They lead to third-party sites.