Uncontrolled Memory Access in Apache OpenOffice WMF Import Code
CVE-2026-90629

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Openoffice
Vendor
CVE Published:
4 November 2026

What is CVE-2026-90629?

An uncontrolled memory access vulnerability in the WMF import code of Apache OpenOffice versions up to 4.1.16 allows maliciously crafted WMF files to trigger invalid memory access, potentially leading to program crashes or memory corruption. Users are advised to upgrade to version 4.1.17, which addresses this issue and enhances the overall security of the software.

Affected Version(s)

Apache OpenOffice 0 <= 4.1.16

References

https://lists.apache.org/thread.html/lbmfms02205zbpwq3pm3...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anthropic and Ada Logics
.