Heap-based Out-of-Bounds Read in wvWare wv Affects AbiWord and More
CVE-2026-112056

6.8MEDIUM

Key Information:

Vendor

Wvware

Status
Wv
Vendor
CVE Published:
18 October 2026

What is CVE-2026-112056?

wvWare wv versions up to 1.2.9 present a vulnerability in the wvGetSTSH function within stylesheet.c, allowing attackers to exploit out-of-bounds reads by providing specially crafted Word stylesheets. This can lead to application crashes, particularly affecting users of AbiWord. Attackers can manipulate the .doc files by including ten or fewer styles or out-of-range style base indexes, triggering potential instability in affected applications.

Affected Version(s)

wv 0 <= 1.2.9

References

https://hackmd.io/@haindpwn/wv-fkp-crun-stsh-cstd-oob-read
third-party-advisory
https://github.com/AbiWord/wv/blob/wv-1-2-9/stylesheet.c#...
technical-description
https://www.vulncheck.com/advisories/wvware-wv-through-1....
third-party-advisory

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.