Unchecked Memory Access Vulnerability in Apache OpenOffice PDF Import
CVE-2026-90624

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Openoffice
Vendor
CVE Published:
4 November 2026

What is CVE-2026-90624?

An unchecked memory access vulnerability has been identified in the PDF import functionality of Apache OpenOffice, specifically affecting versions up to 4.1.16. This flaw allows a specially crafted PDF file to trigger an out-of-bounds memory write, potentially resulting in application crashes or memory corruption. It is recommended that users update to version 4.1.17 or later to mitigate this risk.

Affected Version(s)

Apache OpenOffice 0 <= 4.1.16

References

https://lists.apache.org/thread.html/w1047xm52vyfjt79kw2n...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anonymous working with TrendAI Zero Day Initiative
Anthropic and Ada Logics
.