CVE-2026-90624 · Package
NO FIX YET · SEE WHAT TO DO
Apache OpenOffice up to 4.1.16 has an unchecked memory access in its PDF import code. A crafted PDF can trigger an out-of-bounds memory write that crashes the program or corrupts memory.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Anyone running Apache OpenOffice 4.1.16 or earlier on the affected platform who imports PDF files. The risk comes from opening a crafted PDF, so systems that never import PDFs into OpenOffice are unlikely to be exposed.
Not affected if newer-version, no-pdf-import
Who cares apache-openoffice, desktop, pdf-import
4.1.16 are affected.4.1.17.An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.