Stack Out-of-Bounds Read in Antiword by RSDOIEL

CVE-2026-111678

What is CVE-2026-111678?

Antiword versions prior to 0.37 are susceptible to a stack out-of-bounds read vulnerability due to inadequate bounds checking in the vGet8PapInfo and vGet8ChrInfo functions of prop8.c. Attackers can take advantage of this flaw by crafting a malicious .doc file containing carefully engineered FKP pages. When processed, these pages may cause the application to read beyond the limited 512-byte stack buffer, potentially leading to application crashes or corruption of style parsing. This vulnerability can compromise the integrity and availability of the software, highlighting the importance of prompt updates and security measures.

References