CVE-2026-90626: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Published Nov 3, 2026

Updated

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apache OpenOffice to a version that resolves this vulnerability.
Fixed in 4.1.17

Event History

Nov 4, 2026

CVE Published

via MITRE·11:03 AM

Data Sourced

via MITRE·11:03 AM

DescriptionWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users running Apache OpenOffice 4.1.16 or earlier are affected when they import an encrypted PDF file. Exploitation requires local access and user interaction, as indicated by the CVSS vector.

What can happen if a malicious PDF is imported?

A crafted encrypted PDF can trigger an out-of-bounds memory write in the PDF import code. This may crash Apache OpenOffice or cause memory corruption, with potential impacts to confidentiality, integrity, and availability.

How should this be remediated?

Upgrade Apache OpenOffice to version 4.1.17, which fixes the issue.