Live › vulnerability › CVE-2026-112055
Go to dashboardwvWare's wv library, through version 1.2.9, miscalculates a run count in Word binary FKP data, so wvGetPAPX_FKP and wvGetCHPX_FKP read kilobytes beyond a 512-byte stack buffer. An attacker who supplies a crafted .doc file can crash applications that parse it, such as AbiWord.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that use wvWare's wv library to parse Word 97 .doc files, including AbiWord, are exposed when they open documents from untrusted sources. Systems that never convert or open .doc files with wv can skip it. The sources do not say which fixed version exists.
No product ranges from the sources yet.
ldd or the package manager, for example dpkg -l | grep wv or rpm -q wvwvWare --version or the package manager, versions up to 1.2.9 are affectedUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like AbiWord.
This page as .md · .json · in your agent: get_signal("CVE-2026-112055")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.