CVE-2026-90628: Apache OpenOffice: Stack overflow in CFF hint handling
An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache OpenOfficeto a version that resolves this vulnerability.Fixed in 4.1.17
Event History
Frequently Asked Questions
What user interaction is required for exploitation?
Exploitation requires a user to interact with a crafted CFF font during PDF export. The issue is locally exploitable and does not require attacker privileges.
Are default installations affected?
The provided information identifies Apache OpenOffice versions through 4.1.16 as affected in the PDF export code. It does not state whether PDF export or handling of CFF fonts must be explicitly enabled or configured.
What should be done to remediate this issue?
Upgrade Apache OpenOffice to version 4.1.17, which fixes the vulnerability.
What is the impact if exploitation succeeds?
A crafted CFF font can trigger a stack overflow, resulting in a program crash or memory corruption. The description also indicates that code execution may be possible.