Multimedia Vulnerability in Apache OpenOffice by The Apache Software Foundation
CVE-2026-90632

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Openoffice
Vendor
CVE Published:
4 November 2026

What is CVE-2026-90632?

A vulnerability in Apache OpenOffice allows crafted documents to exploit the GStreamer multimedia component. This can lead to the arbitrary loading of local files, which might be included when the document is saved or exported (e.g., as a PDF). To mitigate this risk, users must upgrade to Apache OpenOffice version 4.1.17, which addresses the exploitation method relevant to multimedia content.

Affected Version(s)

Apache OpenOffice 0 <= 4.1.16

References

https://lists.apache.org/thread.html/9rrjtmlnmg47m6soyrl8...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Edoardo Geraci and Thomas Rinsma of Codean Labs
.