5.8Media

CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption

Apache Software Foundation Apache OpenOffice Publicada: (hace 5 días)

Descripción

A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier. This could cause a crash or otherwise a corruption of memory areas. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Debilidad (CWE): CWE-122

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Apache Software Foundation Apache OpenOffice ≤ 4.1.16
apache openoffice < 4.1.17

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:* < 4.1.17