Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• lists.apache.org/thread.html/n2qgb44t8lom9s9z4xwqs3dt3mx0cggy Üretici bülteni
• openwall.com/lists/oss-security/2026/11/03/26 Diğer

Kayıt geçmişi

1. 4 Kas 2026 17:30CVSS puanı değişti: – → 7.3
2. 4 Kas 2026 14:03Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption
• 7,3 CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files
• 3,3 CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
• 7,3 CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF import
• 7,3 CVE-2026-90628Apache OpenOffice: Stack overflow in CFF hint handling
• 5,5 CVE-2026-90627Apache OpenOffice: Local file inclusion via SQL provider and flat file database references