CVE-2026-90629: Apache OpenOffice: Out of bounds memory access during WMF import
An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache OpenOfficeto a version that resolves this vulnerability.Fixed in 4.1.17
Event History
Frequently Asked Questions
What user action is required for exploitation?
A user must open or otherwise import a crafted WMF file in Apache OpenOffice. The vulnerability has no required privileges but requires user interaction.
Which installations are affected?
Apache OpenOffice versions through 4.1.16 are affected. Upgrading to version 4.1.17 addresses the issue.
What is the practical impact if exploitation succeeds?
The crafted WMF can trigger invalid memory access in the WMF import code, resulting in an application crash or memory corruption.