Uncontrolled Memory Access in Apache OpenOffice PDF Import Code

CVE-2026-90634

What is CVE-2026-90634?

The vulnerability entails an uncontrolled memory access that occurs within the PDF import functionality of Apache OpenOffice, particularly affecting versions up to 4.1.16. This flaw allows specially crafted PDF files to exploit out-of-bounds memory writing, potentially leading to crashes or memory corruption within the application. Users are strongly advised to update to version 4.1.17 to mitigate this issue and enhance their security posture against potential exploitation.

References