Live › vulnerability › CVE-2026-112056
Go to dashboardwvWare's wv library has a heap out-of-bounds read in wvGetSTSH when parsing Word stylesheets. A crafted .doc file with ten or fewer styles or out-of-range base indexes makes the reading application crash, as demonstrated with AbiWord.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that parse untrusted Microsoft Word .doc files with wv or wvWare, such as document converters, previewers or word processors built on it. The sources describe only a crash, not code execution. Teams that never process untrusted .doc uploads with this library can skip it.
No product ranges from the sources yet.
1.2.9.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past heap arrays, crashing applications such as AbiWord.
This page as .md · .json · in your agent: get_signal("CVE-2026-112056")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.