CVE-2026-90624
Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
Description
An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache OpenOffice | ≤4.1.16 |
Affected configurations (NVD)
CPE applicability statements from the NVD's analysis: 1 configuration, 1 CPE match. In a configuration marked “all of”, the vulnerable product is affected only together with the others listed (for example the hardware it runs on).
CPE matches
| # | CPE | Versions | Role |
|---|---|---|---|
| 1 | apache openofficecpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:* |
< 4.1.17 | vulnerable |
References
External links from the record. They lead to third-party sites.