CVE-2026-90624

UNKNOWN 0.0

Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

CWE	CWE-787
Vendor	apache software foundation
Product	apache openoffice
Published	Nov 4, 2026
Last Updated	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache openoffice

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache openoffice are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache OpenOffice

0 ≤ 4.1.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/w1047xm52vyfjt79kw2n0d3ln6sq9g5s openwall.com: http://www.openwall.com/lists/oss-security/2026/11/03/25

Credits

Anonymous working with TrendAI Zero Day Initiative Anthropic and Ada Logics