As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-90634: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
CVE-2026-90634 affects Apache OpenOffice through version 4.1.16 and involves an out-of-bounds memory write vulnerability in the PDF import functionality. A crafted PDF file can trigger uncontrolled memory access, leading to program crashes or memory corruption. Affected users should upgrade to version 4.1.17 to remediate the issue.
Why it matters: OpenOffice users and organizations deploying versions 4.1.16 and earlier face potential denial of service or code execution risk when opening untrusted PDF files; upgrading to 4.1.17 is necessary.
- Source published
- First seen by Cybersecurity Tracker