CVE-2026-90628
Apache OpenOffice: Stack overflow in CFF hint handling
Description
An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache OpenOffice | ≤4.1.16 |
Affected configurations (NVD)
CPE applicability statements from the NVD's analysis: 1 configuration, 1 CPE match. In a configuration marked “all of”, the vulnerable product is affected only together with the others listed (for example the hardware it runs on).
CPE matches
| # | CPE | Versions | Role |
|---|---|---|---|
| 1 | apache openofficecpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:* |
< 4.1.17 | vulnerable |
References
External links from the record. They lead to third-party sites.