Heap Out-of-Bounds Read in Antiword by R.S. Doiel

CVE-2026-111677

What is CVE-2026-111677?

The Antiword software, specifically versions up to 0.37, is vulnerable to a heap out-of-bounds read flaw found in the vGet8LstInfo function within prop8.c. This issue arises due to an inverted bounds check on the count of PlcfLst records, enabling attackers to craft malicious Word 8 .doc files. By claiming up to 0xffff LSTF records in a small buffer, a hacker can cause the process to read past the allocated heap memory, which may lead to a crash and potentially disclose sensitive information.

References