As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-90624: Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
CVE-2026-90624 is a heap-based buffer overflow in Apache OpenOffice's PDF import functionality affecting versions through 4.1.16. A crafted PDF file can trigger an out-of-bounds memory write, potentially crashing the application or causing memory corruption. Apache OpenOffice 4.1.17 resolves the issue.
Why it matters: Users of OpenOffice who open untrusted PDF files face remote code execution risk; upgrade to version 4.1.17 immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-90624: Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability
A heap-based buffer overflow vulnerability in Apache OpenOffice's PDF import functionality allows a crafted PDF file to trigger out-of-bounds memory writes on affected systems through version 4.1.16. The flaw can cause program crashes or memory corruption. Apache OpenOffice 4.1.17 addresses the issue.
Why it matters: Organizations and users running OpenOffice 4.1.16 and earlier should upgrade to 4.1.17 immediately, as attackers can deliver malicious PDFs to trigger memory corruption or remote code execution on unpatched systems.
- Source published
- First seen by Cybersecurity Tracker