CVE-2026-90634: Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache OpenOfficeto a version that resolves this vulnerability.Fixed in 4.1.17
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Apache OpenOffice versions through 4.1.16 are affected when they import a crafted encrypted PDF file.
What does exploitation require?
An attacker needs to convince a user to import a specially crafted encrypted PDF. The issue is locally triggered and requires user interaction; no prior privileges are required.
What can happen if the vulnerability is exploited?
The crafted PDF can cause an out-of-bounds memory write in the PDF import code, resulting in a program crash or memory corruption.
What should teams do to remediate it?
Upgrade Apache OpenOffice to version 4.1.17, which fixes the issue.