Stack-based Out-of-Bounds Read in wvWare wv by AbiWord
CVE-2026-112055

6.8MEDIUM

Key Information:

Vendor

Wvware

Status
Wv
Vendor
CVE Published:
18 October 2026

What is CVE-2026-112055?

wvWare wv version 1.2.9 is susceptible to a stack-based out-of-bounds read vulnerability in the functions wvGetPAPX_FKP and wvGetCHPX_FKP. This vulnerability arises from an unvalidated FKP run count, allowing attackers to craft a malicious .doc file containing an excessively large crun value. Upon exploitation, this leads to the potential read of memory beyond the 512-byte stack buffer, resulting in application crashes and possible unauthorized information disclosure.

Affected Version(s)

wv 0 <= 1.2.9

References

https://hackmd.io/@haindpwn/wv-fkp-crun-stsh-cstd-oob-read
third-party-advisory
https://github.com/AbiWord/wv/blob/wv-1-2-9/fkp.c#L122
technical-description
https://www.vulncheck.com/advisories/wvware-wv-through-1....
third-party-advisory

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.