CVE-2026-90634

UNKNOWN 0.0

Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

CWE	CWE-787
Vendor	apache software foundation
Product	apache openoffice
Published	Nov 4, 2026
Last Updated	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache openoffice

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache openoffice are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache OpenOffice

0 ≤ 4.1.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/1c0lropx46w8ozwk29p5yw1xlq4wnbll openwall.com: http://www.openwall.com/lists/oss-security/2026/11/03/32

Credits

Anonymous working with TrendAI Zero Day Initiative