CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Descripción

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://lists.apache.org/thread.html/1c0lropx46w8ozwk29p5yw1xlq4wnbll vendor-advisoryMailing ListVendor Advisory
• http://www.openwall.com/lists/oss-security/2026/11/03/32 Mailing ListThird Party Advisory