Vulnerability/
https://seclists.org/oss-sec/2026/q4/503

https://seclists.org/oss-sec/2026/q4/503: CVE-2026-90628: Apache OpenOffice: Stack overflow in CFF hint handling

Q: What user action or workflow exposes an installation to this issue?

The affected code is in PDF export and is triggered by a crafted CFF font. Installations are exposed when OpenOffice processes such a font during PDF export.

Q: What could an attacker achieve if they can supply a malicious font?

A crafted CFF font can cause a stack overflow, resulting in a program crash or memory corruption. The advisory also states that this may allow execution of other code.

Q: Are older Apache OpenOffice releases affected, and what is the remediation?

Apache OpenOffice versions through 4.1.16 are affected. Upgrade to version 4.1.17, which fixes the issue.

Published Nov 3, 2026

Updated

Affected Software

1 affected component

Apache OpenOffice<=4.1.16

Frequently Asked Questions

What user action or workflow exposes an installation to this issue?

The affected code is in PDF export and is triggered by a crafted CFF font. Installations are exposed when OpenOffice processes such a font during PDF export.

What could an attacker achieve if they can supply a malicious font?

A crafted CFF font can cause a stack overflow, resulting in a program crash or memory corruption. The advisory also states that this may allow execution of other code.

Are older Apache OpenOffice releases affected, and what is the remediation?

Apache OpenOffice versions through 4.1.16 are affected. Upgrade to version 4.1.17, which fixes the issue.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.