CVE-2026-90626

Published: Nov 4, 2026Modified: Nov 4, 2026

Description

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://lists.apache.org/thread.html/n2qgb44t8lom9s9z4xwqs3dt3mx0cggy

Source: security@apache.org

Timeline

No history available yet.