CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-90629: Apache OpenOffice: Out of bounds memory access during WMF import

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12281

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-90629: Apache OpenOffice: Out of bounds memory access during WMF import

CVE-2026-90629 is an out of bounds memory access vulnerability in Apache OpenOffice's WMF import functionality affecting versions through 4.1.16. A malicious WMF file can trigger invalid memory access, leading to application crash or memory corruption. Apache OpenOffice 4.1.17 addresses this issue.

Why it matters: Users running Apache OpenOffice through version 4.1.16 should upgrade immediately to 4.1.17 to prevent crashes and potential memory corruption from crafted WMF files.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

CVE-2026-90629: Apache OpenOffice: Out of bounds memory access during WMF import

An out of bounds memory access vulnerability in Apache OpenOffice's WMF import functionality affects versions through 4.1.16. A crafted WMF file can trigger invalid memory access, leading to program crash or memory corruption. The vendor recommends upgrading to version 4.1.17 to remediate the issue.

Why it matters: OpenOffice users who handle untrusted WMF files should upgrade immediately, as attackers can crash the application or potentially corrupt memory by providing a malicious file.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary