CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Beschreibung

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://lists.apache.org/thread.html/1c0lropx46w8ozwk29p5yw1xlq4wnbll vendor-advisoryMailing ListVendor Advisory
• http://www.openwall.com/lists/oss-security/2026/11/03/32 Mailing ListThird Party Advisory